ISOISO 27001Isms FundamentalsEASYFree question
What does ISO 27001 require regarding documented information?
- A.The ISMS must include documented information required by the standard and determined necessary by the organization
- B.The ISMS must hold a signed procedure for each Annex A control and a dated log for each audit
- C.The ISMS must retain the certification body's audit reports and the supplier contracts for ten years
- D.The ISMS must keep paper originals of policies and approvals in a locked archive at the head office
Why A is correct
ISO 27001 requires documented information that is mandated by the standard as well as any additional documentation the organization determines necessary for ISMS effectiveness.
Know someone studying for ISO 27001? Send them this one.