Download as xlsx, pdf, or txt
Download as xlsx, pdf, or txt
You are on page 1of 7

This workbook, the spreadsheets and data contained are all classified as:

Restricted
REC A4
List of records for ISMS
Version
Last updated
Description of record
Records of training, skills, experience and qualifications

Monitoring and measurement results

Internal audit program

Results of internal audits

Results of the management review

Results from corrective actions

Logs of user activitites, exceptions and security events

Procedure for document control

Controls for managing records

Procedure for internal audit

Procedure for corrective action

Bring your own device (BYOD) policy

Mobile device policy

Information classification policy

Password policy

Disposal and destruction policy

Procedures for working in secure areas


Clear desk and clear screen policy

Change management policy

Backup policy

Information transfer policy

Business impact anaysis (BIA)

BIA Exercising and testing plan

BIA Maintaining and review plan

Business continuity strategy

Automatically created records


Logs created withiin information systems
Reports created from the information systems

Manually created records


Reports where additional input was needed
Training records
Records from drills. Testing and exercising
Meeting minutes
Corrective actions
Asset inventories
Checklists
To-Do lists
Change history within documents
Post-incident review results
Visitor log book
Clause reference Record name
Clause 7.2

Clause 9.1

Clause 9.2

Clause 9.2

Clause 9.3

Clause 10.1

Clauses A.12.4.1 / A12.4.3

Clause 7.5

Clause 7.5

Clause 9.2

Clause 10.1

Clause A.6.2.1 DOC A6.2

Clause A.6.2.1 DOC A6.2

Clause A.8.2.1 / A.8.2.2 / A.8.2.3 DOC A8.2

Clause A.9.2.1 / A.9.2.2 / A.9.2.4 / A.9.3.1 / A.9.4.3

Clause A.8.3.2 / A.11.2.7 DOC A11

Clause A.11.1.5
Clause A.11.2.9 DOC A11

Clause A.12.1.2 / A.14.2.4

Clause A.12.3.1

Clause A.13.2.1 / A.13.2.2 / A.13.2.3

Clause A.17.1.1 Business Continuity Plan

Clause A.17.1.3 Business Continuity Plan

Clause A.17.1.3 Business Continuity Plan

Clause A.17.2.1 Business Continuity Plan


Retention period Destruction method

You might also like