Back

Disseminate and communicate the business process documentation to interested personnel and affected parties.


CONTROL ID
13038
CONTROL TYPE
Communicate
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS




This Control directly supports the implied Control(s):
  • Document the organization's business processes., CC ID: 13035

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH




  • An organization's business processes and activities, including its information governance program, shall be documented in an open and verifiable manner, and that documentation shall be available to all personnel and appropriate, interested parties. (Principle of Transparency:, Generally Accepted Recordkeeping Principles®, For the Web)
  • The cloud service provider should provide documentation about the critical operations and procedures to cloud service customers who require it. (Annex A: § CLD.12.1.5 Table: Cloud service provider, ISO/IEC 27017:2015, Information technology — Security techniques — Code of practice for information security controls based on ISO/IEC 27002 for cloud services, First edition 2015-12-15)
  • Communicated effectively throughout the entity. (App A Objective 2:1b, FFIEC Business Continuity Planning (BCP) IT Examination Handbook, November 2019)