1Define

ISO 27001Obligation

ISO 42001Stakeholder Requirement

Stakeholder Requirement

Purpose

A requirement an interested party places on the management system, with provenance into guidance, control, risk and policy.

Role

ISO/IEC 27001 and 42001 Clause 4.2 require determining which interested-party requirements are relevant. Ten Factor currently hosts those as guidance or policy text without a first-class source link. ISO/IEC 27001 names this concern Obligation; ISO/IEC 42001 names it Stakeholder Requirement.

This page is a stub: fields, examples and schema are still to be specified.

Links upstream

• Party Register
• Contracts, licences, employment agreements, regulations

Links downstream

• Applicability Profile
• Guidance
• Control
• Risk
• Policy

Related factors

• Governance Is Composable
• Govern Dependencies

References

• ISO/IEC 27001 Analysis — Clause 4.2
• ISO/IEC 42001 Analysis — Clause 4.2
• ISO/IEC 27001 Guidance Catalog (iso27001-4.2)