Clause 7.5.2 Documented information: creating and updating
Clause 7.5.2 in ISO 27001:2022 (ISO/IEC 27001:2022). All ISO 27001:2022 controls held. Open ISO 27001:2022 on the standards site.
The control as we hold it
Documented information: creating and updating. When documented information is created or updated the organization makes sure it has suitable identification and description (such as title, date, author or reference number), a suitable format (such as language, software version or graphics) and medium (paper or electronic), and is reviewed and approved as suitable and adequate.
Reviewed and closest counterparts in the other frameworks
We hold no cross-framework row for Clause 7.5.2 yet. The reviewed pairs page lists the released pairs and their coverage.
What an auditor commonly asks for
General guidance for this control area (domain: Clause 7), in our words, not a statement of the standard and not binding on an assessor.
- Document control conventions for titles, dates, authors, reference numbers and versions
- Examples of ISMS documents showing identification, format and approval
- Approval records demonstrating review for suitability and adequacy
- Templates used for ISMS documents