ISOISO 27001DocumentationEASYFree question
What is the difference between documents and records in ISO 27001?
- A.Documents are held on paper and signed by hand; records are kept in electronic form
- B.Documents provide instructions and requirements; records provide evidence of activities performed and results achieved
- C.Documents are written by auditors and reviewed yearly; records are written by management
- D.Documents are external standards and regulations; records are internal policies and procedures
Why B is correct
Documents provide instructions and requirements (policies, procedures), while records provide evidence of activities performed and results achieved (audit reports, logs).
Know someone studying for ISO 27001? Send them this one.