ISO 27001 Clause 7
Read about the requirements for ISO 27001 Clause 7, which covers the resources, competence, awareness and documents required for ISO 27001.
Clause 7 is made up of the following sub-clauses:
Clause 7.1 covers the resources required for establishing, implementing, maintaining and continually improving the ISMS. It includes a breakdown of the types of resources to consider.
Clause 7.2 assesses the competence of a workforce from an ISMS perspective, as well as provides an example of what to include in a competence matrix.
Clause 7.3 covers awareness and some factors to bear in mind when senior leadership are assessing the awareness of different parties.
Clause 7.4 is all about communication around the ISMS, providing a framework for who does the communication and with whom they communicate, as well as what, when and how information is communicated.
Clause 7.5 covers the mandatory ISO 27001 document requirements, including a detailed 13-point guide about what documentation is needed.