Module 2 - Documentation and management systems Flashcards
Which section of the Standard outlines requirements for Documented Information
7.5
What documentation should the ISMS include?
Documentation required by the Standard
Documentation deemed necessary by the org for effective operation of the ISMS
Which section of the Standard outlines requirements for creating and updating documentation?
7.5.2
What are the Standards requirements for creating and updating documentation?
7.5.2 states - shall ensure:
a. Identification and description
b. In a suitable and readable format or media
c. Review and approved for suitability and adequacy
What information should a document contain to ensure its suitably identified?
Title, date, author and reference number
Which section of the Standard outlines requirements for the control of documented information?
7.5.3
What is required in the Standard with regards to control of documented information?
- Must be available
- Must be adequately protected - CIA
What activities foes an org need to address with regards to Documented Information?
- Distribution, access, retrieval and use
- Storage and preservation
- Change control
- Retention and disposition
Depressed Slimy Chickens Ribbet
What information is usually included as Documents?
Policies, procedures, manuals, working instructions
Documents and Records are both consider types of Documented Information - What is the difference between a document and a record?
A document is a plan, procedure, policy or other descriptive text.
A record records the occurrence of an activity inc date/time, what was completed, who completed etc
What are the 5 stages of the Document Lifecycle?
Dx-xxx
- Drafted
- Reviewed and reworked
- Approved
- Distributed
- Archived
DR-ADA
What is a Process?
A process is any activity or set of activities that use resources to transform inputs into outputs.
What is a Procedure?
A procedure is a uniform method that outlines how to perform a process
What is a Work Instruction?
A work instruction describes how to perform a task within a process in more detail