Frameworks / ISO 22301:2019 / 7.5 ISO 22301:2019
Support, ISO 22301:2019
ISO 22301:2019 7.5: Documented information Hold the documented information the BCMS depends on, create and update it to a defined standard, and control it throughout its life.
Maintained by Gerard Blokdyk · Control text last updated 21 May 2026 What else in your programme already covers this This control maps to 53 controls across 32 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
5.12 Classification of information 5.33 Protection of records 5.37 Documented operating procedures 8.13 Information backup 12.1.1 12.1.1 Overall information security policy established and disseminated 12.1.2 12.1.2 Security policy reviewed annually and updated as needed 2.1.1 2.1.1 Requirement 2 policies and procedures governed 3.1.1 3.1.1 Requirement 3 policies and procedures maintained and in use SOC2-CC3.1 CC3.1 Objectives specified clearly enough to assess risk (COSO principle 6) SOC2-CC4.1 CC4.1 Ongoing and separate evaluations of control (COSO principle 16) SOC2-CC4.2 CC4.2 Evaluating and communicating control deficiencies (COSO principle 17) SOC2-CC5.3 CC5.3 Deploying controls through policies and procedures (COSO principle 12) 10.4 Documented information 10.4.2 Documented information about processes 10.4.3 Documented information about results 5.5.5 Documented information 7.5 PII sharing, transfer, and disclosure ISO-37002-7.5 Documented information ISO37002-7.5 Documented Information ISO-39001-7.5 Documented information ISO39001-7.5 Documented Information ISO-41001-7.5 Documented information ISO41001-7.5 Documented Information ISO-50001-7.5 Documented information 7.5 Documented information ISO-56002-7.5 Documented information ISO56002-7.5 Documented information 27003-7.5 Documented Information ISO27003-7.5 Documented information AS9100D-7.5 Documented Information CFTC-SS-20 Production of System Safeguards Books and Records 5.5.2 Documented information 7.5 Documented information 7.5 Documented information 7.5 Documented information ISO-22313-7.5 Documented information 5.37 Documented operating procedures ISO30401-7.5 Documented information 7.5 7.5 Documented information 7.5 Documented information 7.5 Documented information 7.6 Documented information 7.5 Documented information 7.5 Documented information NIST-CSF-PR.PS-04 Log records are generated and made available for continuous monitoring Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected .
Other controls in Support, ISO 22301:2019 You are reading one control. How much of ISO 22301:2019 have you already done? ISO 22301:2019 7.5 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ISO 22301:2019 your existing evidence covers. Hold APRA CPS 230 Operational Risk Management and 28 of 57 ISO 22301:2019 controls already carry evidence.
Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the APRA CPS 230 Operational Risk Management pair alone.
Query this from an agent The graph holds this control, the 53 it maps to, and the evidence behind each claim, over MCP and REST.