Templates content
Assign topic to the user
Answer:
To mention references is not mandatory for ISO 27001, but this is considered as a good practice, because it makes easier to identify which requirements the document is fulfilling, which in turn makes easier the job of auditors to check the documents, and the job of document owner's to review and update them.
Comment as guest or Sign in
Mar 07, 2019

