×Cross-cutting

ISO 27001Competence Record

ISO 42001Competence Record

Competence Record

Purpose

Evidence that a role has the required skill, qualification and training, with expiry.

Role

ISO/IEC 27001 and 42001 Clause 7.2 require determining necessary competence, ensuring people are competent, and retaining evidence. Ten Factor names owners; it does not record the competence that makes that ownership credible.

This page is a stub: fields, examples and schema are still to be specified.

Links upstream

• Party Register

Links downstream

• AI System
• Audit Programme
• Management Review
• Audit Log

Related factors

• Governance Has Owners
• Evidence by Default

References

• ISO/IEC 27001 Analysis — Clause 7.2
• ISO/IEC 42001 Analysis — Clause 7.2
• ISO/IEC 27001 Guidance Catalog (iso27001-7.2)