×Cross-cutting

ISO 27001Communication Plan

ISO 42001Communication Requirement

Communication Requirement

Purpose

What is communicated about the management system, to whom, when, through which channel, and with what evidence.

Role

ISO/IEC 27001 and 42001 Clause 7.4 require determining internal and external communications relevant to the management system. ISO/IEC 27001 names this Communication Plan. Incident communication and reporting obligations specialise this object.

This page is a stub: fields, examples and schema are still to be specified.

Links upstream

• Party Register
• Policy

Links downstream

• Reporting Obligation
• Incident
• Management Review

Related factors

• Governance Has Owners
• Governance Is Composable

References

• ISO/IEC 27001 Analysis — Clause 7.4
• ISO/IEC 42001 Analysis — Clause 7.4
• ISO/IEC 27001 Guidance Catalog (iso27001-7.4)