Guest user Created: Nov 04, 2016 Last commented: Nov 04, 2016

Why are some documents mandatory?

Why is 8.1.1 mandantory and 8.2.1 not mandantory? the norm gives me no hints. can you tell me the text parts of the ISO where I can rean the mandantory needs?

0 0

Assign topic to the user

Select user

Expert

Dejan Kosutic Nov 04, 2016

Answer: I assume you're referring to controls A.8.1.1 and A.8.2.1 - ISO 27001 defines what must be documented by saying "documented" or some similar expression. In case of A.8.1.1 it says "... an inventory of these assets shall be drawn up..." whereas A.8.2.1 doesn't say anything about documenting.

This article will provide you further explanation: Explanation of the basic terminology in ISO standards https://advisera.com/27001academy/blog/2015/01/12/explanation-of-the-basic-terminology-in-iso-standards/

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Nov 03, 2016

Expert Advice Community