Clause 7.4 Communication
Clause 7.4 in ISO 27001:2022 (ISO/IEC 27001:2022). All ISO 27001:2022 controls held. Open ISO 27001:2022 on the standards site.
The control as we hold it
Communication. The organization must decide what internal and external communication the ISMS needs, covering what is communicated, when, to whom, and how.
Reviewed and closest counterparts in the other frameworks
We hold no cross-framework row for Clause 7.4 yet. The reviewed pairs page lists the released pairs and their coverage.
What an auditor commonly asks for
General guidance for this control area (domain: Clause 7), in our words, not a statement of the standard and not binding on an assessor.
- A communication plan or matrix stating topics, timing, audiences and channels for ISMS communication
- Records of communications carried out according to the plan
- External communication arrangements, for example with customers, regulators and suppliers
- Evidence the plan is reviewed