{"id":18326,"date":"2019-07-03T17:57:18","date_gmt":"2019-07-03T17:57:18","guid":{"rendered":"https:\/\/www.process.st\/templates\/iso-27001-information-security-management-system-iso27k-isms-audit-checklist\/"},"modified":"2024-03-13T16:43:32","modified_gmt":"2024-03-13T16:43:32","slug":"iso-27001-information-security-management-system-iso27k-isms-audit-checklist","status":"publish","type":"post","link":"https:\/\/www.process.st\/templates\/iso-27001-information-security-management-system-iso27k-isms-audit-checklist\/","title":{"rendered":"ISO 27001 Information Security Management System (ISO27K ISMS) Audit Checklist"},"content":{"rendered":"\n<section id=\"introduction\">\n <h2>Introduction:<\/h2>\n <div class=\"image-content\">\n  <figure>\n   <a href=\"https:\/\/ps-attachments.s3.amazonaws.com\/269f73b9-2454-4cc6-baef-e6ce7535d5c1\/t5uQkEmpKytS2DyRPtpDFQ.png\" alt=\"Introduction:\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/ps-attachments.s3.amazonaws.com\/269f73b9-2454-4cc6-baef-e6ce7535d5c1\/t5uQkEmpKytS2DyRPtpDFQ.png\"> <\/a><!-- No caption -->\n  <\/figure>\n <\/div>\n <div class=\"text-content\">\n  <p><span><\/span>One of the<strong> core functions of an information security management system<\/strong> (ISMS) is an internal audit of the ISMS against the requirements of the ISO\/IEC 27001:2013 standard.<\/p>\n  <p>Especially for smaller organizations, this can also be one of the hardest functions to successfully implement in a way that meets the requirements of the standard.<\/p>\n  <p>This checklist is designed to <strong>streamline the ISO 27001 audit process<\/strong>, so you can perform first and second-party audits, whether for an ISMS implementation or for contractual or regulatory reasons.<\/p>\n  <p class=\"style-warning\">The checklist is intended as a generic guidance; it is not a replacement for ISO 27001.<\/p>\n  <p>For best results, users are encouraged to <a href=\"https:\/\/www.process.st\/help\/docs\/editing-templates\/\" rel=\"nofollow noopener\" target=\"_blank\">edit the checklist<\/a> and modify the contents to best suit their use cases, as it cannot provide specific guidance on the particular risks and controls applicable to every situation.<\/p>\n  <p>Typically, management system auditors will prepare custom checklists that reflect the specific scope, scale, and objectives of the ISMS being audited.<\/p>\n <\/div>\n<\/section>\n<section id=\"enter-basic-details\">\n <h2>Enter basic details<\/h2>\n <div class=\"text-content\">\n  <p><span>Audit documentation should include the details of the auditor, as well as the start date, and basic information about the nature of the audit.&nbsp;<\/span><\/p>\n  <p>More detailed information will be gathered later in the checklist.<\/p>\n  <p>Before beginning preparations for the audit, <strong>enter some basic details about the information security management system (ISMS) audit<\/strong> using the <a href=\"https:\/\/www.process.st\/help\/docs\/form-fields\/\" rel=\"nofollow noopener\" target=\"_blank\">form fields<\/a> below.<\/p>\n  <h4>Audit programme manager information<\/h4>\n <\/div>\n <div class=\"members-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Audit programme manager <\/label> <select disabled class=\"form-control\"> <option value=\"A member or group will be selected here\">A member or group will be selected here<\/option> <\/select>\n  <\/div>\n <\/div>\n <div class=\"text-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Audit programme manager first name <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n <div class=\"text-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Audit programme manager second name <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n <div class=\"email-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Audit programme manager email <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n <div class=\"text-content\">\n  <h4>Auditee information<\/h4>\n <\/div>\n <div class=\"text-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Auditee <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n <div class=\"email-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Auditee representative email <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n <div class=\"date-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Audit start date <\/label>\n   <div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Reason for audit <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Notes on previous audit (if applicable) <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"text-content\">\n  <p class=\"style-warning\">If this process involves multiple people, you can use the <a href=\"https:\/\/www.process.st\/help\/docs\/form-fields\/\" rel=\"nofollow noopener\" target=\"_blank\">members form field<\/a>&nbsp;to allow the person running this checklist to select and <a href=\"https:\/\/www.process.st\/help\/role-assignments\/\" rel=\"nofollow noopener\" target=\"_blank\">assign<\/a> additional individuals.<\/p>\n  <p class=\"style-info\">For example, if management is running this checklist, they may wish to assign the lead internal auditor after completing the ISMS audit details.<\/p>\n <\/div>\n<\/section>\n<section id=\"preparing-for-the-audit\">\n <h2>Preparing for the audit:<\/h2>\n<\/section>\n<section id=\"establish-context-of-the-isms-audit\">\n <h2>Establish context of the ISMS audit<\/h2>\n <div class=\"text-content\">\n  <p><span>In order to&nbsp;<\/span><strong><span>understand the context of the audit<\/span><\/strong><span>, the audit programme manager should take into account the auditee\u2019s:<\/span><\/p>\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> (Subtasks) <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Business goals and objectives\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Relevant external and internal issues\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     The needs and expectations of relevant interested parties\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Information security and confidentiality requirements of the ISMS\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"text-content\">\n  <p><strong><span>Record the context of the audit&nbsp;<\/span><\/strong><span>in the form field below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Context of the audit <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"establish-objectives-of-the-isms-audit\">\n <h2>Establish objectives of the ISMS audit<\/h2>\n <div class=\"text-content\">\n  <p><span>The audit programme manager needs to&nbsp;<\/span><strong><span>establish objectives of the QMS audit<\/span><\/strong><span>.<\/span><\/p>\n  <p><span>Individual audit objectives need to be consistent with the context of the auditee, including the following factors:<\/span><\/p>\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> (Subtasks) <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Extent of the QMS to be audited\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Capacity of the QMS to help the organization to meet relevant regulatory requirements\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Effectiveness of the QMS in producing its intended results\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Opportunities for QMS improvements\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Suitability of the QMS with respect to overall strategic context and business objectives of the auditee\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Audit objectives <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"determine-isms-audit-scope\">\n <h2>Determine ISMS audit scope<\/h2>\n <div class=\"text-content\">\n  <p><span>Audit scope should be consistent with the context of the auditee.<\/span><\/p>\n  <p><span>Consider the following factors, and<\/span><strong><span>&nbsp;define the audit scope<\/span><\/strong><span>&nbsp;in the form field below:<\/span><\/p>\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> (Subtasks) <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Audit location\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Audit function\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Audit activities\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Processes to be audited\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Audit time-frame\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Audit scope <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"establish-criteria-of-the-isms-audit\">\n <h2>Establish criteria of the ISMS audit<\/h2>\n <div class=\"text-content\">\n  <p><span>For individual audits, criteria should be defined to be used as a reference against which conformity will be determined.<\/span><\/p>\n  <p><span>Individual audit criteria might include:<\/span><\/p>\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> (Subtasks) <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Relevant policies\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Processes and standard operating proceudures\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Performance objectives and KPIs\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Statutory and other relevant regulatory requirements\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Management system requirements (e.g. other ISO standards)\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      6\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Risks and opportunities as determined by the auditee\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      7\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Internal codes of conduct\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Audit criteria <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"ensure-isms-audit-monitoring-systems-are-in-place\">\n <h2>Ensure ISMS audit monitoring systems are in place<\/h2>\n <div class=\"text-content\">\n  <p><span>Audit programme managers should also make sure that&nbsp;<\/span><strong><span>tools and systems are in place to ensure adequate monitoring of the audit&nbsp;<\/span><\/strong><span>and all relevant activities.<\/span><\/p>\n  <p><span>Relevant activities to be monitored might include any of the following:<\/span><\/p>\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> (Subtasks) <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Timeliness of the audit (whether deadlines and schedules are being met)\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Performance of the audit team members (including lead auditor)\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Successful implementation of audit plans\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Feedback from auditee and other relevant parties\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Documentation of audit activities\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"request-documented-information-from-auditee\">\n <h2>Request documented information from auditee<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Request all existing relevant ISMS documentation from the auditee<\/span><\/strong><span>. You can use the form field below to quickly and easily request this information<\/span><\/p>\n <\/div>\n<\/section>\n<section id=\"assign-audit-roles-and-responsibilities\">\n <h2>Assign audit roles and responsibilities:<\/h2>\n<\/section>\n<section id=\"assign-audit-team\">\n <h2>Assign audit team<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Audit programme managers<\/span><\/strong><span>&nbsp;should assign audit team members.<\/span><\/p>\n  <p><span>When deciding on your audit team,&nbsp;<\/span><strong><span>consider the following<\/span><\/strong><span>:<\/span><\/p>\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> (Subtasks) <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Overall competence required by the audit team\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Audit complexity\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Combined or joint audit?\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Audit methods\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Ability of the audit team to work and interact effectively with the auditee\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      6\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Relevant internal and external issues (e.g. auditee language barriers)\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      7\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Type and complexity of processes to be audited (do they require specialized knowledge?)\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"text-content\">\n  <p><span>Use the various fields below to<\/span><strong><span>&nbsp;assign audit team members<\/span><\/strong><span>.<\/span><\/p>\n <\/div>\n <div class=\"members-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Audit team member #1 <\/label> <select disabled class=\"form-control\"> <option value=\"A member or group will be selected here\">A member or group will be selected here<\/option> <\/select>\n  <\/div>\n <\/div>\n <div class=\"text-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Audit team member #1 full name <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n <div class=\"members-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Audit team member #2 <\/label> <select disabled class=\"form-control\"> <option value=\"A member or group will be selected here\">A member or group will be selected here<\/option> <\/select>\n  <\/div>\n <\/div>\n <div class=\"text-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Audit team member #2 full name <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n <div class=\"members-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Audit team member #3 <\/label> <select disabled class=\"form-control\"> <option value=\"A member or group will be selected here\">A member or group will be selected here<\/option> <\/select>\n  <\/div>\n <\/div>\n <div class=\"text-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Audit team member #3 full name <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n <div class=\"text-content\">\n  <p class=\"style-warning\"><span>Should you require fewer or more audit team members,&nbsp;<\/span><a href=\"https:\/\/www.process.st\/help\/docs\/editing-templates\/\" rel=\"nofollow noopener\" target=\"_blank\"><span>edit this template<\/span><\/a><span>&nbsp;to your requirements.<\/span><\/p>\n <\/div>\n<\/section>\n<section id=\"assign-audit-team-lead\">\n <h2>Assign audit team lead<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Audit programme managers&nbsp;<\/span><\/strong><span>should be responsible for assigning the audit team leader.<\/span><\/p>\n  <p><span>This should be done well ahead of the scheduled date of the audit, to be sure that planning can take place in a timely manner.<\/span><\/p>\n  <p class=\"style-info\"><span>A&nbsp;<\/span><a href=\"https:\/\/www.process.st\/help\/docs\/dynamic-due-dates\/\" rel=\"nofollow noopener\" target=\"_blank\"><span>dynamic due date<\/span><\/a><span>&nbsp;has been set for this task, for one month before the scheduled start date of the audit.<\/span><\/p>\n  <p><span>Use the form fields below to&nbsp;<\/span><strong><span>record the details of the lead auditor.<\/span><\/strong><\/p>\n <\/div>\n <div class=\"members-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Lead auditor <\/label> <select disabled class=\"form-control\"> <option value=\"A member or group will be selected here\">A member or group will be selected here<\/option> <\/select>\n  <\/div>\n <\/div>\n <div class=\"text-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Lead auditor first name <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n <div class=\"text-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Lead auditor second name <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n <div class=\"email-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Lead auditor email <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Additional lead auditor details <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"reviewing-documented-information\">\n <h2>Reviewing documented information:<\/h2>\n<\/section>\n<section id=\"review-auditees-documented-information\">\n <h2>Review auditee's documented information<\/h2>\n <div class=\"text-content\">\n  <p>The lead auditor should&nbsp;<strong>obtain and review all documentation of the auditee's management system<\/strong>. They audit leader can then approve, reject or reject with comments the documentation. Continuation of this checklist is not possible until all documentation has been reviewed by the lead auditor.<br><\/p>\n  <p>This will help to prepare for individual audit activities, and will serve as a high-level overview from which the lead auditor will be able to better identify and understand areas of concern or nonconformity.<\/p>\n  <p>Documented information is an umbrella term that could refer to:<\/p>\n  <ul>\n   <li>Processes (either recorded on paper or with software)<\/li>\n   <li>Management system documents and records<\/li>\n   <li>Previous audit reports<\/li>\n  <\/ul>\n  <p>The above list is by no means exhaustive. The lead auditor should also take into account individual audit scope, objectives, and criteria.<\/p>\n  <p class=\"style-info\">Reference material, such as individual ISO standards, will be useful at this point.<\/p>\n  <p>Using the form fields below,&nbsp;<strong>record any issues of nonconformities observed<\/strong>.<\/p>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Issue(s) with documented information? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"approval\">\n <h2>Approval:<\/h2>\n <div class=\"approval-content\">\n  <div class=\"header\">\n   <div class=\"list-title\">\n    Will be submitted for approval:\n   <\/div>\n  <\/div>\n  <div class=\"approval-rule-subject-tasks-list\">\n   <ul class=\"list\">\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Review auditee's documented information<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n   <\/ul>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"conditional-resolve-documented-information-issues\">\n <h2>(Conditional) Resolve documented information issue(s)<\/h2>\n <div class=\"text-content\">\n  <p><span>Using the form field below,&nbsp;<\/span><strong><span>describe the issue(s)<\/span><\/strong><span>&nbsp;with documented information so far, and the&nbsp;<\/span><strong><span>steps taken to resolve the issue(s).&nbsp;<\/span><\/strong><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Issue(s) with documented information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> How were documented information issue(s) resolved? <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"prepare-an-audit-plan\">\n <h2>Prepare an audit plan<\/h2>\n <div class=\"text-content\">\n  <p><span>The lead auditor should&nbsp;<\/span><strong><span>prepare an audit plan for the individual audit<\/span><\/strong><span>.<\/span><\/p>\n  <p><span>This plan should involve the following components and considerations:<\/span><\/p>\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> (Subtasks) <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Roles and responsibilities of each audit team member\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Risk-based approach to audit planning\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Scheduling and coordination of audit activities\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Scope and complexity of the audit\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Sampling techniques for collecting evidence\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      6\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Opportunities for improvement\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      7\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Risks of inadequate planning\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      8\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Impact of the audit on auditee activities\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"file-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Audit plan <\/label>\n   <div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assign-work-to-the-audit-team\">\n <h2>Assign work to the audit team<\/h2>\n <div class=\"text-content\">\n  <p><span>The lead auditor should&nbsp;<\/span><strong><span>assign work to the audit team<\/span><\/strong><span>.<\/span><\/p>\n  <p><span>Work to be assigned should be outlined in the audit plan.<\/span><\/p>\n  <p class=\"style-info\"><span>You can use Process Street's&nbsp;<\/span><a href=\"https:\/\/www.process.st\/help\/docs\/task-assignments\/\" rel=\"nofollow noopener\" target=\"_blank\"><span>task assignment<\/span><\/a><span>&nbsp;feature to assign specific tasks in this checklist to individual members of your audit team.<\/span><\/p>\n <\/div>\n<\/section>\n<section id=\"initiating-the-audit\">\n <h2>Initiating the audit:<\/h2>\n<\/section>\n<section id=\"make-arrangements-with-the-auditee\">\n <h2>Make arrangements with the auditee<\/h2>\n <div class=\"text-content\">\n  <p><span>The<\/span><strong><span>&nbsp;lead auditor should make contact with the auditee<\/span><\/strong><span>&nbsp;and ensure the following:<\/span><\/p>\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> (Subtasks) <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Basic introduction and clear outline of lead auditor roles and responsibilities\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Clarify the methods of communication\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Permission has been granted to proceed with the audit\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     The auditee understands the audit programme so far\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Relevant information is accessible to all parties involved with the audit\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      6\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Request access to additional relevant information\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      7\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Determine if there are any additional regulatory requirements that will impact audit activities\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      8\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Confirm information security policies\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      9\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Confirm audit scheduling\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      10\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Location-specific arrangements are made\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      11\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Auditee understands requirements for additional observers\/guides etc.\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      12\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Risk areas of note are communicated\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      13\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Outstanding issues are resolved\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"text-content\">\n  <p><span>Any&nbsp;<\/span><strong><span>scheduling of audit activities<\/span><\/strong><span>&nbsp;should be made well in advance.<\/span><\/p>\n  <p><span>For example, the dates of the opening and closing meetings should be provisionally declared for planning purposes.<\/span><\/p>\n <\/div>\n <div class=\"date-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Date of opening meeting <\/label>\n   <div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"conduct-open-meeting\">\n <h2>Conduct open meeting<\/h2>\n <div class=\"text-content\">\n  <p><span>An opening meeting between the auditee and all relevant parties should be held.<\/span><\/p>\n  <p><span>It's advised that&nbsp;<\/span><strong><span>the opening meeting should be led by the lead auditor<\/span><\/strong><span>.<\/span><\/p>\n  <p class=\"style-warning\"><span>The scheduling for this meeting should have already been determined earlier in the checklist.<\/span><\/p>\n  <p><span>During the opening meeting,&nbsp;<\/span><strong><span>confirm the following with all relevant parties<\/span><\/strong><span>:<\/span><\/p>\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> (Subtasks) <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Audit programme plans\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Individual audit scope\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Individual audit objectives\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Individual audit criteria\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Individual audit plans\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      6\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Roles and responsibilities of the audit team\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      7\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     That all planned activities can be performed, and proper authorization is acquired\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      8\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Language of the audit\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      9\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Information security protocol\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      10\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Relevant access and arrangements for the audit team\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      11\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Notable on-site activities that could impact audit process\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"text-content\">\n  <p><span>Typically,&nbsp;<\/span><strong><span>such an opening meeting will involve the auditee's management<\/span><\/strong><span>, as well as crucial actors or specialists in relation to processes and procedures to be audited.<\/span><\/p>\n  <p><span>This meeting is a great opportunity to ask any questions about the audit process and generally clear the air of uncertainties or reservations.<\/span><\/p>\n  <p><span>Depending on the size and scope of the audit (and as such the organization being audited) the opening meeting might be as simple as announcing that the audit is starting, with a simple explanation of the nature of the audit.<\/span><\/p>\n  <p><span>Familiarity of the auditee with the audit process is also an important factor in determining how extensive the opening meeting should be.<\/span><\/p>\n  <p><span>During the opening meeting,&nbsp;<\/span><strong><span>the following items should be clearly communicated<\/span><\/strong><span>:<\/span><\/p>\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> (Subtasks) <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Methods for reporting and communicating audit progress\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Conditions of audit termination\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Procedures for dealing with audit findings during the audit\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Procedures for receiving feedback from the auditee in response to findings during the audit\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"ensure-relevant-audit-information-is-accessible\">\n <h2>Ensure relevant audit information is accessible<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Where, when, and how information is accessible<\/span><\/strong><span>&nbsp;is a crucial factor during the audit.<\/span><\/p>\n  <p><span>It's important to make clear where all relevant interested parties can find important audit information.<\/span><\/p>\n  <p><span>Make sure important information is readily accessible by&nbsp;<\/span><strong><span>recording the location in the form fields of this task<\/span><\/strong><span>.<\/span><\/p>\n  <p><span>You may want to consider uploading important information to a secure central repository (URL) that can be easily shared to relevant interested parties.<\/span><\/p>\n  <p class=\"style-warning\"><span>Audits can store important information both physically and\/or virtually.<\/span><\/p>\n <\/div>\n <div class=\"text-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Location of relevant audit information <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n <div class=\"url-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Relevant audit information (URL) <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"collecting-evidence-context-of-the-organization\">\n <h2>Collecting evidence (context of the organization):<\/h2>\n<\/section>\n<section id=\"assess-understanding-of-the-organization-and-its-context\">\n <h2>Assess understanding of the organization and its context<\/h2>\n <div class=\"text-content\">\n  <p><span>Understanding the context of the organization is necessary when developing an information security management system in order to identify, analyze, and understand the business environment in which the organization conducts its business and realizes its product.<\/span><\/p>\n  <p><strong><span>Record information pertaining to the organization and its context&nbsp;<\/span><\/strong><span>in the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Internal issues information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> External issues information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Relevant interested parties information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with organization and its context? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for organization and its context <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for organization and its context <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for organization and its context <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assess-the-needs-and-expectations-of-relevant-interested-parties\">\n <h2>Assess the needs and expectations of relevant interested parties<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the needs and expectations of interested parties<\/span><\/strong><span>&nbsp;in the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with needs and expectations of interested parties? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for needs and expectations of interested parties <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for needs and expectations of interested parties <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for needs and expectations of interested parties <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assess-isms-scope\">\n <h2>Assess ISMS scope<\/h2>\n <div class=\"text-content\">\n  <p><span>The scope of the ISMS is basically a description of the processes, procedures, services, and products that the ISMS applies to.<\/span><\/p>\n  <p><strong><span>Provide a record of evidence gathered relating to the ISMS scope<\/span><\/strong><span>&nbsp;in the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS scope information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with ISMS scope? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for ISMS scope <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for ISMS scope <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS scope <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"collecting-evidence-leadership\">\n <h2>Collecting evidence (leadership):<\/h2>\n<\/section>\n<section id=\"assess-leadership-of-the-isms\">\n <h2>Assess leadership of the ISMS<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the ISMS leadership<\/span><\/strong><span>&nbsp;in the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS leadership information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with ISMS leadership? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for ISMS leadership <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for ISMS leadership <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS leadership <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assess-isms-policy\">\n <h2>Assess ISMS policy<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the ISMS quality policy&nbsp;<\/span><\/strong><span>in the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS policy information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with ISMS policy? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for ISMS policy <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for ISMS policy <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS policy <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assess-isms-roles-responsibilities-and-authorities\">\n <h2>Assess ISMS roles, responsibilities, and authorities<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the organizational roles, responsibilities, and authorities of the ISMS <\/span><\/strong><span>in the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS roles and responsibilities information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with ISMS roles and responsibilities? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for ISMS roles and responsibilities <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for ISMS roles and responsibilities <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS roles and responsibilities <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assess-consultation-and-participation-of-workers\">\n <h2>Assess consultation and participation of workers<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the consultation and participation of the workers of the ISMS&nbsp;<\/span><\/strong><span>using<\/span><span>&nbsp;the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Consultation and participation of workers information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with consultation and participation of workers? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for consultation and participation of workers <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for consultation and participation of workers <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for consultation and participation of workers <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"collecting-evidence-planning\">\n <h2>Collecting evidence (planning):<\/h2>\n<\/section>\n<section id=\"assess-actions-to-address-risks-and-opportunities\">\n <h2>Assess actions to address risks and opportunities<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the documentation of risks and opportunities in the ISMS&nbsp;<\/span><\/strong><span>using&nbsp;the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS risks information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Procedures for ISMS risk mitigation information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS opportunities information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Procedures for engaging ISMS opportunities information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with documentation of ISMS risks and opportunities? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for ISMS risks and opportunities <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for ISMS risks and opportunities <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS risks and opportunities <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assess-isms-objectives-and-plans-to-achieve-them\">\n <h2>Assess ISMS objectives and plans to achieve them<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the ISMS objectives and plans to achieve them&nbsp;<\/span><\/strong><span>in the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS objectives information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Plans to achieve ISMS objectives information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with ISMS objectives and plans to achieve them? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities with ISMS objectives and plans to achieve them <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities with ISMS objectives and plans to achieve them <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS objectives and plans to achieve them <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"collecting-evidence-support\">\n <h2>Collecting evidence (support):<\/h2>\n<\/section>\n<section id=\"assess-isms-resources\">\n <h2>Assess ISMS resources<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the documentation and implementation of ISMS resources&nbsp;<\/span><\/strong><span>using<\/span><span>&nbsp;the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS resources information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with ISMS resources? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for ISMS resources <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for ISMS resources <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS resources <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assess-isms-competence\">\n <h2>Assess ISMS competence<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the documentation and implementation of ISMS competence&nbsp;<\/span><\/strong><span>using<\/span><span>&nbsp;the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS competence information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with ISMS competence? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for ISMS competence <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for ISMS competence <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS competence <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assess-isms-awareness\">\n <h2>Assess ISMS awareness<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the documentation and implementation of ISMS awareness&nbsp;<\/span><\/strong><span>using<\/span><span>&nbsp;the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS awareness information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with ISMS awareness? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for ISMS awareness <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for ISMS awareness <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS awareness <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assess-isms-communication\">\n <h2>Assess ISMS communication<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the documentation and implementation of ISMS communication&nbsp;<\/span><\/strong><span>using<\/span><span>&nbsp;the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS communication&nbsp;information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with ISMS communication? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for ISMS communication <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for ISMS communication <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS communication <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assess-isms-documented-information\">\n <h2>Assess ISMS documented information<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the documentation information of the ISMS&nbsp;<\/span><\/strong><span>using<\/span><span>&nbsp;the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS documented information notes <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with ISMS documented information? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for ISMS documented information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for ISMS documented information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS documented information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"collecting-evidence-operation\">\n <h2>Collecting evidence (operation):<\/h2>\n<\/section>\n<section id=\"assess-isms-operational-planning-and-control\">\n <h2>Assess ISMS operational planning and control<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the operational planning and control of the ISMS&nbsp;<\/span><\/strong><span>using<\/span><span>&nbsp;the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS operational planning and control information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformities with ISMS operational planning and control? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for ISMS operational planning and control <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for ISMS operational planning and control <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS operational planning and control <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assess-isms-information-security-risk-assessment-procedures\">\n <h2>Assess ISMS information security risk assessment procedures<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the information security risk assessment procedures of the ISMS&nbsp;<\/span><\/strong><span>using<\/span><span>&nbsp;the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS information security risk assessment procedures information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformities with ISMS information security risk assessment procedures? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for ISMS information security risk assessment procedures <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for ISMS information security risk assessment procedures <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS information security risk assessment procedures <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assess-information-security-risk-treatment-procedures\">\n <h2>Assess information security risk treatment procedures<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the information security risk treatment procedures of the ISMS&nbsp;<\/span><\/strong><span>using<\/span><span>&nbsp;the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS information security risk treatment procedures information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with ISMS information security risk treatment procedures? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for ISMS information security risk treatment procedures <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for ISMS information security risk treatment procedures <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS information security risk treatment procedures <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"collecting-evidence-performance-evaluation\">\n <h2>Collecting evidence (performance evaluation):<\/h2>\n<\/section>\n<section id=\"assess-systems-for-monitoring-and-measuring-isms-performance\">\n <h2>Assess systems for monitoring and measuring ISMS performance<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the systems for monitoring and measuring performance of the ISMS&nbsp;<\/span><\/strong><span>using<\/span><span>&nbsp;the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Systems for monitoring and measuring ISMS performance information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformities with systems for monitoring and measuring ISMS performance? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for systems for monitoring and measuring ISMS performance <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for systems for monitoring and measuring ISMS performance <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for systems for monitoring and measuring ISMS performance <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assess-isms-internal-audit-procedures\">\n <h2>Assess ISMS internal audit procedures<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the internal audit procedures of the ISMS&nbsp;<\/span><\/strong><span>using<\/span><span>&nbsp;the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS internal audit procedures information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with ISMS internal audit procedures? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for ISMS internal audit procedures <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for ISMS internal audit procedures <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS internal audit procedures <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assess-isms-management-review-procedures\">\n <h2>Assess ISMS management review procedures<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to the management review procedures of the ISMS&nbsp;<\/span><\/strong><span>using<\/span><span>&nbsp;the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS management review procedures information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with ISMS management review procedures? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for ISMS management review procedures <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for ISMS management review procedures <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS management review procedures <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"collecting-evidence-improvement\">\n <h2>Collecting evidence (improvement):<\/h2>\n<\/section>\n<section id=\"assess-isms-nonconformity-and-corrective-action\">\n <h2>Assess ISMS nonconformity and corrective action<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to nonconformity and corrective action in the ISMS&nbsp;<\/span><\/strong><span>using<\/span><span>&nbsp;the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS nonconformity and corrective action information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with ISMS nonconformity and corrective action? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for ISMS nonconformity and corrective action <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for ISMS nonconformity and corrective action <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS nonconformity and corrective action <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assess-continuous-improvement-procedures\">\n <h2>Assess continuous improvement procedures<\/h2>\n <div class=\"text-content\">\n  <p><strong><span>Provide a record of evidence gathered relating to continuous improvement procedures of the ISMS&nbsp;<\/span><\/strong><span>using<\/span><span>&nbsp;the form fields below.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> ISMS continuous improvement procedures information <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Nonconformity with ISMS continuous improvement procedures? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record conformities for ISMS continuous improvement procedures <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Record nonconformities for ISMS continuous improvement procedures <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Suggestions for ISMS continuous improvement procedures <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"audit-findings\">\n <h2>Audit findings:<\/h2>\n<\/section>\n<section id=\"review-audit-evidence-and-findings\">\n <h2>Review audit evidence and findings<\/h2>\n <div class=\"text-content\">\n  <p>The audit leader can review and approve, reject or reject with comments, the below audit evidence, and findings. It is not possible to continue in this checklist until the below has been reviewed.<\/p>\n <\/div>\n <div class=\"text-content\">\n  <hr>\n  <h4>Context of the organization<\/h4>\n  <hr>\n  <h5>Understanding the organization and its context<\/h5>\n  <p><span>Internal issues: {{form.Internal_issues_information}}<\/span><\/p>\n  <p><span>External issues: {{form.External_issues_information}}<\/span><\/p>\n  <p><span>Relevant interested parties: {{form.Relevant_interested_parties_information}}<\/span><\/p>\n  <p><span>Any nonconformities?: {{form.Nonconformity_with_organization_and_its_context?}}<\/span><\/p>\n  <p><span>Conformities: {{form.Record_conformities_for_organization_and_its_context}}<\/span><\/p>\n  <p><span>Nonconformities: {{form.Record_nonconformities_for_organization_and_its_context}}<\/span><\/p>\n  <p><span>Suggestions: {{form.Suggestions_for_organization_and_its_context}}<\/span><\/p>\n  <h5>Needs and expectations of relevant interested parties<\/h5>\n  <p>Information: {{form.Needs_and_expectations_of_interested_parties_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_needs_and_expectations_of_interested_parties?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_needs_and_expectations_of_interested_parties}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_needs_and_expectations_of_interested_parties}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_needs_and_expectations_of_interested_parties}}<\/p>\n  <h5>ISMS scope<\/h5>\n  <p>Information: {{form.ISMS_scope_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_ISMS_scope?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_ISMS_scope}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_ISMS_scope}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_scope}}<\/p>\n  <hr>\n  <h4>Leadership<\/h4>\n  <hr>\n  <h5>ISMS leadership<\/h5>\n  <p>Information: {{form.ISMS_leadership_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_ISMS_leadership?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_ISMS_leadership}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_ISMS_leadership}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_leadership}}<\/p>\n  <h5>ISMS policy<\/h5>\n  <p>Information: {{form.ISMS_policy_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_ISMS_policy?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_ISMS_policy}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_ISMS_policy}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_policy}}<\/p>\n  <h5>ISMS roles, responsibilities, and authorities<\/h5>\n  <p>Information: {{form.ISMS_roles_and_responsibilities_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_ISMS_roles_and_responsibilities?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_ISMS_roles_and_responsibilities}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_ISMS_roles_and_responsibilities}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_roles_and_responsibilities}}<\/p>\n  <h5>ISMS consultation and participation of workers<\/h5>\n  <p>Information: {{form.Consultation_and_participation_of_workers_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_consultation_and_participation_of_workers?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_consultation_and_participation_of_workers}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_consultation_and_participation_of_workers}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_consultation_and_participation_of_workers}}<\/p>\n  <hr>\n  <h4>Planning<\/h4>\n  <hr>\n  <h5>Actions to assess ISMS risks and opportunities<\/h5>\n  <p>ISMS risks information: {{form.ISMS_risks_information}}<\/p>\n  <p>Procedures for ISMS risk mitigation information: {{form.Procedures_for_engaging_ISMS_opportunities_information}}<span><\/span><\/p>\n  <p>ISMS opportunities information: {{form.ISMS_opportunities_information}}<\/p>\n  <p>Procedures for engaging ISMS opportunities information: {{form.Procedures_for_engaging_ISMS_opportunities_information}}<span><\/span><\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_documentation_of_ISMS_risks_and_opportunities?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_ISMS_risks_and_opportunities}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_ISMS_risks_and_opportunities}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_risks_and_opportunities}}<\/p>\n  <h5>ISMS objectives and plans to achieve them<\/h5>\n  <p>ISMS objectives information: {{form.ISMS_objectives_information}}<\/p>\n  <p>Plans to achieve ISMS objectives information: {{form.Plans_to_achieve_ISMS_objectives_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_ISMS_objectives_and_plans_to_achieve_them?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_with_ISMS_objectives_and_plans_to_achieve_them}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_with_ISMS_objectives_and_plans_to_achieve_them}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_objectives_and_plans_to_achieve_them}}<\/p>\n  <hr>\n  <h4>Support<\/h4>\n  <hr>\n  <h5>ISMS resources<\/h5>\n  <p>Information: {{form.ISMS_resources_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_ISMS_resources?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_ISMS_resources}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_ISMS_resources}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_resources}}<\/p>\n  <h5>ISMS competence<\/h5>\n  <p>Information: {{form.ISMS_competence_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_ISMS_competence?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_ISMS_competence}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_ISMS_competence}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_competence}}<\/p>\n  <h5>ISMS awareness<\/h5>\n  <p>Information: {{form.ISMS_awareness_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_ISMS_awareness?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_ISMS_awareness}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_ISMS_awareness}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_awareness}}<\/p>\n  <h5>ISMS communication<\/h5>\n  <p>Information: {{form.ISMS_communication_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_ISMS_communication?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_ISMS_communication}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_ISMS_communication}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_communication}}<\/p>\n  <h5>ISMS documented information<\/h5>\n  <p>Information: {{form.ISMS_documented_information_notes}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_ISMS_documented_information?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_ISMS_documented_information}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_ISMS_documented_information}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_documented_information}}<\/p>\n  <hr>\n  <h4>Operation<\/h4>\n  <hr>\n  <h5>ISMS operational planning and control<\/h5>\n  <p>Information: {{form.ISMS_operational_planning_and_control_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformities_with_ISMS_operational_planning_and_control?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_ISMS_operational_planning_and_control}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_ISMS_operational_planning_and_control}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_operational_planning_and_control}}<\/p>\n  <h5>ISMS information security risk assessment procedures<\/h5>\n  <p>Information: {{form.ISMS_information_security_risk_assessment_procedures_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformities_with_ISMS_information_security_risk_assessment_procedures?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_ISMS_information_security_risk_assessment_procedures}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_ISMS_information_security_risk_assessment_procedures}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_information_security_risk_assessment_procedures}}<\/p>\n  <h5>ISMS information security risk treatment procedures<\/h5>\n  <p>Information: {{form.ISMS_information_security_risk_treatment_procedures_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_ISMS_information_security_risk_treatment_procedures?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_ISMS_information_security_risk_treatment_procedures}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_ISMS_information_security_risk_treatment_procedures}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_information_security_risk_treatment_procedures}}<\/p>\n  <hr>\n  <h4>Performance evaluation<\/h4>\n  <hr>\n  <h5>Systems for assessing and monitoring ISMS performance<\/h5>\n  <p>Information: {{form.Systems_for_monitoring_and_measuring_ISMS_performance_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformities_with_systems_for_monitoring_and_measuring_ISMS_performance?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_systems_for_monitoring_and_measuring_ISMS_performance}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_systems_for_monitoring_and_measuring_ISMS_performance}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_systems_for_monitoring_and_measuring_ISMS_performance}}<\/p>\n  <h5>ISMS internal audit procedures<\/h5>\n  <p>Information: {{form.ISMS_internal_audit_procedures_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_ISMS_internal_audit_procedures?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_ISMS_internal_audit_procedures}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_ISMS_internal_audit_procedures}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_internal_audit_procedures}}<\/p>\n  <h5>ISMS management review procedures<\/h5>\n  <p>Information: {{form.ISMS_management_review_procedures_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_ISMS_management_review_procedures?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_ISMS_management_review_procedures}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_ISMS_management_review_procedures}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_management_review_procedures}}<\/p>\n  <hr>\n  <h4>Improvement<\/h4>\n  <hr>\n  <h5>ISMS nonconformity and corrective action<\/h5>\n  <p>Information: {{form.ISMS_nonconformity_and_corrective_action_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_ISMS_nonconformity_and_corrective_action?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_ISMS_nonconformity_and_corrective_action}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_ISMS_nonconformity_and_corrective_action}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_nonconformity_and_corrective_action}}<\/p>\n  <h5>ISMS continuous improvement procedures<\/h5>\n  <p>Information: {{form.ISMS_continuous_improvement_procedures_information}}<\/p>\n  <p>Any nonconformities?: {{form.Nonconformity_with_ISMS_continuous_improvement_procedures?}}<\/p>\n  <p>Conformities: {{form.Record_conformities_for_ISMS_continuous_improvement_procedures}}<\/p>\n  <p>Nonconformities: {{form.Record_nonconformities_for_ISMS_continuous_improvement_procedures}}<\/p>\n  <p>Suggestions: {{form.Suggestions_for_ISMS_continuous_improvement_procedures}}<\/p>\n <\/div>\n<\/section>\n<section id=\"approval-1\">\n <h2>Approval:<\/h2>\n <div class=\"approval-content\">\n  <div class=\"header\">\n   <div class=\"list-title\">\n    Will be submitted for approval:\n   <\/div>\n  <\/div>\n  <div class=\"approval-rule-subject-tasks-list\">\n   <ul class=\"list\">\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Review audit evidence and findings<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n   <\/ul>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"closing-the-audit\">\n <h2>Closing the audit:<\/h2>\n<\/section>\n<section id=\"prepare-isms-audit-report\">\n <h2>Prepare ISMS audit report<\/h2>\n <div class=\"text-content\">\n  <p class=\"style-danger\"><strong><span>Audit reports should be issued within 24 hours of the audit&nbsp;<\/span><\/strong><span>to ensure the auditee is given opportunity to take corrective action in a timely, thorough fashion<\/span><\/p>\n  <p><span>If the report is issued several weeks after the audit, it will typically be lumped onto the \"to-do\" pile, and much of the momentum of the audit, including discussions of findings and feedback from the auditor, will have faded.<\/span><\/p>\n  <p><span>The&nbsp;<\/span><strong><span>lead auditor<\/span><\/strong><span>&nbsp;should prepare the audit report.<\/span><\/p>\n  <p class=\"style-warning\"><span>This task has been assigned a dynamic due date set to 24 hours after the audit evidence has been evaluated against criteria.<\/span><\/p>\n  <p><span>The audit report is the final record of the audit; the high-level document that clearly outlines a complete, concise, clear record of everything of note that happened during the audit.<\/span><\/p>\n  <p><span>Use the sub-checklist below to check off important items included within the audit report:<\/span><\/p>\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> (Subtasks) <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Audit programme objectives\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Individual audit objectives\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Individual audit scope\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Individual audit criteria\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     An overview of the auditee &amp; their context\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      6\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Roles and responsibilities of the audit team\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      7\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Key dates and locations of the audit\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      8\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Complete audit findings and corresponding evidence\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      9\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Audit conclusions\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      10\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Assessment of audit criteria\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      11\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Unresolved conflicts of opinion between audit team and auditee\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"text-content\">\n  <p><span>Use the form field below to&nbsp;<\/span><strong><span>upload the completed audit report.<\/span><\/strong><\/p>\n <\/div>\n <div class=\"file-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Complete audit report <\/label>\n   <div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n  <\/div>\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Need for follow-up action? <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Yes\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     No\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"issue-isms-audit-report\">\n <h2>Issue ISMS audit report<\/h2>\n <div class=\"text-content\">\n  <p><span>As stressed in the previous task, that the audit report is distributed in a timely manner is<\/span><strong><span>&nbsp;one of the most important aspects of the entire audit process<\/span><\/strong><span>.<\/span><\/p>\n  <p><span>Use the email widget below to quickly and easily distribute the audit report to all relevant interested parties.<\/span><\/p>\n  <p><span>By default, the widget will send the report to:<\/span><\/p>\n  <ul>\n   <li><span>The auditee main point of contact (Auditee main point of contact)<\/span><\/li>\n   <li><span>The audit programme manager (Audit programme manager email<\/span><\/li>\n   <li><span>The lead auditor (Lead auditor email)<\/span><\/li>\n  <\/ul>\n  <p><span>Should you want to distribute the report to additional interested parties, simply&nbsp;<\/span><strong><span>add their email addresses to the email widget below:<\/span><\/strong><\/p>\n <\/div>\n<\/section>\n<section id=\"conditional-prepare-for-audit-followup\">\n <h2>(Conditional) Prepare for audit follow-up<\/h2>\n <div class=\"text-content\">\n  <p><span>Depending on the outcome of the audit,&nbsp;<\/span><strong><span>there may be a need for follow-up action<\/span><\/strong><span>.<\/span><\/p>\n  <p><span>Follow-up action might include:<\/span><\/p>\n  <ul>\n   <li><span>Corrective action in response to nonconformities<\/span><\/li>\n   <li><span>Opportunities for improvement<\/span><\/li>\n   <li><span>Actions to address risks and opportunities<\/span><\/li>\n  <\/ul>\n  <p><strong><span>A time-frame should be agreed upon<\/span><\/strong><span>&nbsp;between the audit team and auditee within which to carry out follow-up action.<\/span><\/p>\n  <p><span>As part of the follow-up actions, the auditee will be responsible for keeping the audit team informed of any relevant activities undertaken within the agreed time-frame. The completion and effectiveness of these actions will need to be verified - this may be part of a subsequent audit.<\/span><\/p>\n  <p><span>In any case, recommendations for follow-up action should be&nbsp;<\/span><strong><span>prepared ahead of the closing meeting<\/span><\/strong><span>and shared accordingly with relevant interested parties.<\/span><\/p>\n  <p><span>Use the form fields below to&nbsp;<\/span><strong><span>record follow-up action suggestions<\/span><\/strong><span>.<\/span><\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Follow-up actions <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"prepare-for-closing-meeting\">\n <h2>Prepare for closing meeting<\/h2>\n <div class=\"text-content\">\n  <p><span>Before the closing meeting,&nbsp;<\/span><strong><span>the audit team should make adequate preparations<\/span><\/strong><span>.<\/span><\/p>\n  <p><span>Make sure the following items are resolved ahead of the closing meeting:<\/span><\/p>\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> (Subtasks) <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     All audit findings are reviewed against audit objectives\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Audit conclusions are agreed upon\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Recommendations are prepared, if necessary\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Follow-up action has been discussed and agreed upon\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"conduct-closing-meeting\">\n <h2>Conduct closing meeting<\/h2>\n <div class=\"text-content\">\n  <p><span>Just like the opening meeting, it's a great idea to conduct a closing meeting to orient everyone with the proceedings and outcome of the audit, and provide a firm resolution to the whole process.<\/span><\/p>\n  <p><span>The main point of the closing meeting should be to&nbsp;<\/span><strong><span>present audit findings and conclusions<\/span><\/strong><span>.<\/span><\/p>\n  <p><span>Lead auditors should be responsible for presenting audit findings and conclusions.<\/span><\/p>\n  <p><span>You can use the sub-checklist below as a kind of attendance sheet to&nbsp;<\/span><strong><span>make sure all relevant interested parties are in attendance<\/span><\/strong><span>&nbsp;at the closing meeting:<\/span><\/p>\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> (Subtasks) <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Auditee management\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Audit programme manager\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Individuals responsible for the processes and procedures being audited\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     The audit client\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     All members of the audit team\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      6\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Other relevant interested parties, as determined by the auditee\/audit programme\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"text-content\">\n  <p><span>Once attendance has been taken, the lead auditor should go over the complete audit report, with&nbsp;<\/span><strong><span>special attention placed on<\/span><\/strong><span>:<\/span><\/p>\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> (Subtasks) <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     If applicable, first addressing any special occurrences or situations that might have impacted the reliability of audit conclusions\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Making sure all present are familiar with or have access to the complete audit report\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Making sure the auditee is familiar with the audit process\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Confirming the time-frame for audit follow-up actions\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Diverging opinions \/ disagreements in relation to audit findings between any relevant interested parties\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      6\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Opportunities for improvement\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n <div class=\"text-content\">\n  <p><span>Depending on the situation and context of the audit,&nbsp;<\/span><strong><span>formality of the closing meeting can vary<\/span><\/strong><span>.<\/span><\/p>\n  <p><span>For more formal audits, minutes and records of attendance can be kept.<\/span><\/p>\n  <p><span>For more informal (e.g. internal) audits, it can be sufficient to simply communicate audit findings and audit conclusions.<\/span><\/p>\n  <p><span>In any case, during the course of the closing meeting,&nbsp;<\/span><strong><span>the following should be clearly communicated to the auditee<\/span><\/strong><span>:<\/span><\/p>\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> (Subtasks) <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     That audit evidence is based on sample information, and therefore cannot be fully representative of the overall effectiveness of the processes being audited\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     The specific methods of audit reporting used\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Complete audit findings and conclusions\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Advice for how to proceed in light of audit findings\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Consequences if audit findings are not addressed\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      6\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Recommendations for post-audit follow-up activities\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      7\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     The fact that recommendations are not binding\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"complete-the-audit\">\n <h2>Complete the audit<\/h2>\n <div class=\"text-content\">\n  <p><span>The audit is to be considered formally complete&nbsp;<\/span><strong><span>when all planned activities and tasks have been completed, and any recommendations or future actions have been agreed upon with the audit client<\/span><\/strong><span>.<\/span><\/p>\n  <p><span>All information documented during the course of the audit should be&nbsp;<\/span><strong><span>retained or disposed of<\/span><\/strong><span>, depending on:<\/span><\/p>\n  <ul>\n   <li><span>The nature of the information (sensitive, proprietary, etc.)<\/span><\/li>\n   <li><span>Requirements for particular management system standards<\/span><\/li>\n   <li><span>Any other agreements between relevant interested parties<\/span><\/li>\n  <\/ul>\n  <p class=\"style-warning\"><span>It should be assumed that any information collected during the audit should not be disclosed to external parties without written approval of the auditee\/audit client.<\/span><\/p>\n  <p class=\"style-danger\"><span>However, it may sometimes be a legal requirement that certain information be disclosed. Should that be the case, the auditee\/audit client must be informed as soon as possible.<\/span><\/p>\n <\/div>\n<\/section>\n<section id=\"sources\">\n <h2>Sources:<\/h2>\n <div class=\"text-content\">\n  <ul>\n   <li><a href=\"https:\/\/www.iso.org\" rel=\"nofollow noopener\" target=\"_blank\">ISO<\/a> - <a href=\"https:\/\/www.iso.org\/isoiec-27001-information-security.html\" rel=\"nofollow noopener\" target=\"_blank\">ISO 27001:2013<\/a><\/li>\n   <li><a href=\"https:\/\/www.iso.org\" rel=\"nofollow noopener\" target=\"_blank\">ISO<\/a> - <a href=\"https:\/\/www.iso.org\/iso-26000-social-responsibility.html\" rel=\"nofollow noopener\" target=\"_blank\">ISO 26000:2010<\/a><\/li>\n   <li><a href=\"https:\/\/www.iso.org\" rel=\"nofollow noopener\" target=\"_blank\">ISO<\/a> - <a href=\"https:\/\/www.iso.org\/standard\/70017.html\" rel=\"nofollow noopener\" target=\"_blank\">ISO 19011:2018<\/a><\/li>\n   <li><a href=\"https:\/\/www.iso.org\" rel=\"nofollow noopener\" target=\"_blank\">ISO<\/a> - <a href=\"https:\/\/www.iso.org\/sites\/directives\/current\/consolidated\/index.xhtml\" rel=\"nofollow noopener\" target=\"_blank\">Consolidated ISO Supplement<\/a><\/li>\n   <li><a href=\"https:\/\/www.iso.org\" rel=\"nofollow noopener\" target=\"_blank\">ISO<\/a> - <a href=\"https:\/\/www.iso.org\/management-system-standards.html\" rel=\"nofollow noopener\" target=\"_blank\">Management System Standards<\/a><\/li>\n   <li><a href=\"https:\/\/www.iso.org\" rel=\"nofollow noopener\" target=\"_blank\">ISO<\/a> - <a href=\"https:\/\/www.iso.org\/standard\/62085.html\" rel=\"nofollow noopener\" target=\"_blank\">ISO 9001:2015<\/a><\/li>\n   <li><a href=\"https:\/\/www.iso.org\" rel=\"nofollow noopener\" target=\"_blank\">ISO<\/a> - <a href=\"https:\/\/www.iso.org\/standard\/63787.html\" rel=\"nofollow noopener\" target=\"_blank\">ISO 45001:2018<\/a><\/li>\n   <li>Samuel O. Idowu, Catalina Sitnikov, Lars Moratis - <a href=\"https:\/\/www.springer.com\/gp\/book\/9783319926506\" rel=\"nofollow noopener\" target=\"_blank\">ISO 26000 - A&nbsp;Standardized View&nbsp;on Corporate Social&nbsp;Responsibility<\/a><\/li>\n   <li>Martin Hinsch - <a href=\"https:\/\/link.springer.com\/book\/10.1007%2F978-3-658-25550-3\" rel=\"nofollow noopener\" target=\"_blank\">ISO 9001:2015 for Everyday Operations<\/a><\/li>\n   <li>David Lilburn Watson, Andrew Jones - <a href=\"https:\/\/www.elsevier.com\/books\/digital-forensics-processing-and-procedures\/watson\/978-1-59749-742-8\" rel=\"nofollow noopener\" target=\"_blank\">Digital Forensics Processing and Procedures: Meeting the Requirements of ISO 17020, ISO 17025, ISO 27001 and Best Practice Requirements<\/a><\/li>\n  <\/ul>\n  <p><strong>Disclaimer<\/strong>:<\/p>\n  <ol>\n   <li>Process Street is not affiliated or in partnership with the International Organization for Standardization (ISO). The materials on Process Street\u2019s website are provided on an as-is basis and are for educational purposes. Process Street makes no warranties, expressed or implied, and hereby disclaims and negates all other warranties including, without limitation, implied warranties or conditions of merchantability, fitness for a particular purpose, or non-infringement of intellectual property or other violation of rights.<br><br><\/li>\n   <li>Further, Process Street does not warrant or make any representations concerning the accuracy, likely results, or reliability of the use of the materials on its website or otherwise relating to such materials or on any sites linked to this site.<\/li>\n  <\/ol>\n <\/div>\n<\/section>\n<section id=\"related-checklists\">\n <h2>Related checklists:<\/h2>\n <div class=\"text-content\">\n  <ul>\n   <li><a href=\"https:\/\/process.st\/checklist\/iso-19011-management-systems-audit-checklist\" rel=\"nofollow noopener\" target=\"_blank\"><span>ISO 19011 Management Systems Audit Checklist<\/span><\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/iso-9001-internal-audit-checklist-for-quality-management-systems\" rel=\"nofollow noopener\" target=\"_blank\"><span>ISO 9001 Internal Audit Checklist for Quality Management Systems<\/span><\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/iso-45001-occupational-health-and-safety-ohs-audit-checklist\" rel=\"nofollow noopener\" target=\"_blank\"><span>ISO 45001 Occupational Health and Safety (OHS) Audit Checklist<\/span><\/a><\/li>\n   <li><a href=\"https:\/\/www.process.st\/checklist\/iso-9001-and-iso-14001-integrated-management-system-ims-checklist\" rel=\"nofollow noopener\" target=\"_blank\"><span>ISO 9001 and ISO 14001 Integrated Management System (IMS) Checklist<\/span><\/a><\/li>\n   <li><a href=\"https:\/\/www.process.st\/checklist\/iso-9000-structure-template\/\" rel=\"nofollow noopener\" target=\"_blank\"><span>ISO 9000 Structure Template<\/span><\/a><\/li>\n   <li><a href=\"https:\/\/www.process.st\/checklist\/iso-9000-marketing-procedures\/\" rel=\"nofollow noopener\" target=\"_blank\"><span>ISO 9000 Marketing Procedures<\/span><\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/iso-14001-environmental-management-system-self-audit-checklist\" rel=\"nofollow noopener\" target=\"_blank\"><span>ISO 14001 Environmental Management Self Audit Checklist<\/span><\/a><span><\/span><\/li>\n   <li><a href=\"https:\/\/www.process.st\/checklist\/iso-14001-ems-structure-template\" rel=\"nofollow noopener\" target=\"_blank\"><span>ISO 14001 EMS Structure Template<\/span><\/a><\/li>\n   <li><a href=\"https:\/\/www.process.st\/checklist\/iso-14001-ems-mini-manual-procedures\" rel=\"nofollow noopener\" target=\"_blank\"><span>ISO 14001 EMS Mini-Manual Procedures<\/span><\/a><span><\/span><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/iso-26000-social-responsibility-performance-assessment-checklist\" rel=\"nofollow noopener\" target=\"_blank\"><span>ISO 26000 Social Responsibility Performance Assessment Checklist<\/span><\/a><\/li>\n   <li><a href=\"https:\/\/www.process.st\/checklist\/fmea-template-failure-mode-and-effects-analysis\/\" rel=\"nofollow noopener\" target=\"_blank\"><span>FMEA Template: Failure Mode and Effects Analysis<\/span><\/a><\/li>\n   <li><a href=\"https:\/\/www.process.st\/checklist\/SWOT-analysis-template\" rel=\"nofollow noopener\" target=\"_blank\"><span>SWOT Analysis Template<\/span><\/a><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"<p>Introduction: One of the core functions of an information security management system (ISMS) is an internal audit of the ISMS against the requirements of the ISO\/IEC 27001:2013 standard. Especially for smaller organizations, this can also be one of the hardest functions to successfully implement in a way that meets the requirements of the standard. This [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":18327,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"ep_exclude_from_search":false,"cover_icon_emoji":"\ud83d\udd12","cover_icon_url":"","tasks_count":"63","template_description":"Run this checklist to perform an internal audit on an organization's information security management system (ISMS) against the ISO 27001:2013 requirements.","template_id":"kfCUPOQodGi6c9FFR-pJqA","task_0":"Introduction:","task_slug_0":"introduction","task_1":"Enter basic details","task_slug_1":"enter-basic-details","task_2":"Preparing for the audit:","task_slug_2":"preparing-for-the-audit","task_3":"Establish context of the ISMS audit","task_slug_3":"establish-context-of-the-isms-audit","task_4":"Establish objectives of the ISMS audit","task_slug_4":"establish-objectives-of-the-isms-audit","task_5":"Determine ISMS audit scope","task_slug_5":"determine-isms-audit-scope","task_6":"Establish criteria of the ISMS audit","task_slug_6":"establish-criteria-of-the-isms-audit","task_7":"Ensure ISMS audit monitoring systems are in place","task_slug_7":"ensure-isms-audit-monitoring-systems-are-in-place","task_8":"Request documented information from auditee","task_slug_8":"request-documented-information-from-auditee","task_9":"Assign audit roles and responsibilities:","task_slug_9":"assign-audit-roles-and-responsibilities","task_10":"Assign audit team","task_slug_10":"assign-audit-team","task_11":"Assign audit team lead","task_slug_11":"assign-audit-team-lead","task_12":"Reviewing documented information:","task_slug_12":"reviewing-documented-information","task_13":"Review auditee's documented information","task_slug_13":"review-auditees-documented-information","task_14":"Approval: ","task_slug_14":"approval","task_15":"(Conditional) Resolve documented information issue(s)","task_slug_15":"conditional-resolve-documented-information-issues","task_16":"Prepare an audit plan","task_slug_16":"prepare-an-audit-plan","task_17":"Assign work to the audit team","task_slug_17":"assign-work-to-the-audit-team","task_18":"Initiating the audit:","task_slug_18":"initiating-the-audit","task_19":"Make arrangements with the auditee","task_slug_19":"make-arrangements-with-the-auditee","task_20":"Conduct open meeting","task_slug_20":"conduct-open-meeting","task_21":"Ensure relevant audit information is accessible","task_slug_21":"ensure-relevant-audit-information-is-accessible","task_22":"Collecting evidence (context of the organization):","task_slug_22":"collecting-evidence-context-of-the-organization","task_23":"Assess understanding of the organization and its context","task_slug_23":"assess-understanding-of-the-organization-and-its-context","task_24":"Assess the needs and expectations of relevant interested parties","task_slug_24":"assess-the-needs-and-expectations-of-relevant-interested-parties","task_25":"Assess ISMS scope","task_slug_25":"assess-isms-scope","task_26":"Collecting evidence (leadership):","task_slug_26":"collecting-evidence-leadership","task_27":"Assess leadership of the ISMS","task_slug_27":"assess-leadership-of-the-isms","task_28":"Assess ISMS policy","task_slug_28":"assess-isms-policy","task_29":"Assess ISMS roles, responsibilities, and authorities","task_slug_29":"assess-isms-roles-responsibilities-and-authorities","task_30":"Assess consultation and participation of workers","task_slug_30":"assess-consultation-and-participation-of-workers","task_31":"Collecting evidence (planning):","task_slug_31":"collecting-evidence-planning","task_32":"Assess actions to address risks and opportunities","task_slug_32":"assess-actions-to-address-risks-and-opportunities","task_33":"Assess ISMS objectives and plans to achieve them","task_slug_33":"assess-isms-objectives-and-plans-to-achieve-them","task_34":"Collecting evidence (support):","task_slug_34":"collecting-evidence-support","task_35":"Assess ISMS resources","task_slug_35":"assess-isms-resources","task_36":"Assess ISMS competence","task_slug_36":"assess-isms-competence","task_37":"Assess ISMS awareness","task_slug_37":"assess-isms-awareness","task_38":"Assess ISMS communication","task_slug_38":"assess-isms-communication","task_39":"Assess ISMS documented information","task_slug_39":"assess-isms-documented-information","task_40":"Collecting evidence (operation):","task_slug_40":"collecting-evidence-operation","task_41":"Assess ISMS operational planning and control","task_slug_41":"assess-isms-operational-planning-and-control","task_42":"Assess ISMS information security risk assessment procedures","task_slug_42":"assess-isms-information-security-risk-assessment-procedures","task_43":"Assess information security risk treatment procedures","task_slug_43":"assess-information-security-risk-treatment-procedures","task_44":"Collecting evidence (performance evaluation):","task_slug_44":"collecting-evidence-performance-evaluation","task_45":"Assess systems for monitoring and measuring ISMS performance","task_slug_45":"assess-systems-for-monitoring-and-measuring-isms-performance","task_46":"Assess ISMS internal audit procedures","task_slug_46":"assess-isms-internal-audit-procedures","task_47":"Assess ISMS management review procedures","task_slug_47":"assess-isms-management-review-procedures","task_48":"Collecting evidence (improvement):","task_slug_48":"collecting-evidence-improvement","task_49":"Assess ISMS nonconformity and corrective action","task_slug_49":"assess-isms-nonconformity-and-corrective-action","task_50":"Assess continuous improvement procedures","task_slug_50":"assess-continuous-improvement-procedures","task_51":"Audit findings:","task_slug_51":"audit-findings","task_52":"Review audit evidence and findings","task_slug_52":"review-audit-evidence-and-findings","task_53":"Approval: ","task_slug_53":"approval-1","task_54":"Closing the audit:","task_slug_54":"closing-the-audit","task_55":"Prepare ISMS audit report","task_slug_55":"prepare-isms-audit-report","task_56":"Issue ISMS audit report","task_slug_56":"issue-isms-audit-report","task_57":"(Conditional) Prepare for audit follow-up","task_slug_57":"conditional-prepare-for-audit-followup","task_58":"Prepare for closing meeting","task_slug_58":"prepare-for-closing-meeting","task_59":"Conduct closing meeting","task_slug_59":"conduct-closing-meeting","task_60":"Complete the audit","task_slug_60":"complete-the-audit","task_61":"Sources:","task_slug_61":"sources","task_62":"Related checklists:","task_slug_62":"related-checklists","task_63":"","task_slug_63":"","task_64":"","task_slug_64":"","task_65":"","task_slug_65":"","task_66":"","task_slug_66":"","task_67":"","task_slug_67":"","task_68":"","task_slug_68":"","task_69":"","task_slug_69":"","task_70":"","task_slug_70":"","task_71":"","task_slug_71":"","task_72":"","task_slug_72":"","task_73":"","task_slug_73":"","task_74":"","task_slug_74":"","task_75":"","task_slug_75":"","task_76":"","task_slug_76":"","task_77":"","task_slug_77":"","task_78":"","task_slug_78":"","task_79":"","task_slug_79":"","task_80":"","task_slug_80":"","task_81":"","task_slug_81":"","task_82":"","task_slug_82":"","task_83":"","task_slug_83":"","task_84":"","task_slug_84":"","task_85":"","task_slug_85":"","task_86":"","task_slug_86":"","task_87":"","task_slug_87":"","task_88":"","task_slug_88":"","task_89":"","task_slug_89":"","task_90":"","task_slug_90":"","task_91":"","task_slug_91":"","task_92":"","task_slug_92":"","task_93":"","task_slug_93":"","task_94":"","task_slug_94":"","task_95":"","task_slug_95":"","task_96":"","task_slug_96":"","task_97":"","task_slug_97":"","task_98":"","task_slug_98":"","task_99":"","task_slug_99":"","footnotes":""},"categories":[5,57,42,37,52,7,54],"tags":[],"class_list":["post-18326","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-featured","category-information-security","category-internal-audit","category-iso","category-management-system","category-miscellaneous","category-risk-management"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/18326","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/comments?post=18326"}],"version-history":[{"count":0,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/18326\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media\/18327"}],"wp:attachment":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media?parent=18326"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/categories?post=18326"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/tags?post=18326"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}