ISOISO 27001DocumentationEASYFree question
How should documents of external origin be managed?
- A.External documents must be copied into the organization's own template, renumbered, and approved by the original author before use
- B.External documents needed for ISMS planning and operation must be identified, controlled, and managed appropriately
- C.External documents fall outside Clause 7.5.3, with the issuing body responsible for versions, and the organization retaining a receipt log
- D.External documents are exempt from control, and the issuing party holds the current version
Why B is correct
External documents required for ISMS planning and operation must be identified, their distribution controlled, and their currency maintained.
Know someone studying for ISO 27001? Send them this one.