Clause 7.5.1 Documented information: general
Clause 7.5.1 in ISO 27001:2022 (ISO/IEC 27001:2022). All ISO 27001:2022 controls held. Open ISO 27001:2022 on the standards site.
The control as we hold it
Documented information: general. The ISMS has to include both the documented information this standard requires and whatever further documented information the organization judges it needs for an effective ISMS. The note says the amount can vary with the size and type of organization, the complexity of processes and how they interact, and the competence of people.
Reviewed and closest counterparts in the other frameworks
We hold no cross-framework row for Clause 7.5.1 yet. The reviewed pairs page lists the released pairs and their coverage.
What an auditor commonly asks for
General guidance for this control area (domain: Clause 7), in our words, not a statement of the standard and not binding on an assessor.
- A list of documented information required by the standard (scope, policy, risk methodology, SoA, treatment plan, objectives, competence evidence, audit and review results and others) with its location
- A list of additional documents the organization considers necessary
- Evidence each required item exists and is current
- Rationale for the level of documentation chosen