Back

Organize all compliance documents.


CONTROL ID
06096
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain organizational documents., CC ID: 16202

This Control has the following implementation support Control(s):
  • Organize all compliance documents to fit the message., CC ID: 06097


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • format (e.g. language, software version, graphics) and media (e.g. paper, electronic); and (§ 7.5.2 ¶ 1 b), ISO 27001:2013, Information Technology - Security Techniques - Information Security Management Systems - Requirements, 2013)
  • format (e.g. language, software version, graphics) and media (e.g. paper, electronic); and (Section 7.6.4 ¶ 1 bullet 2, ISO/IEC 19770-1, Information technology — IT asset management — Part 1: IT asset management systems — Requirements, Third Edition, 2017-12)
  • format (e.g. language, software version, graphics) and media (e.g. paper, electronic); and (§ 7.5.2 ¶ 1 b), ISO/IEC 27001:2022, Information security, cybersecurity and privacy protection — Information security management systems — Requirements)
  • When creating and updating documented information, the organization ensures its appropriate identification and description, format and media, and review and approval. (§ 7.5.2 Required activity, ISO/IEC 27003:2017, Information technology — Security techniques — Information security management systems — Guidance, Second Edition, 2017-03)
  • Every draft should be organized. (§ 102(a)(1), House Legislative Counsel's Manual on Drafting Style, 104th Congress, 1st Session)