ISO 22301:2019
Support, ISO 22301:2019

ISO 22301:2019 7.5.2: Creating and updating

When documented information is created or updated, make sure it is suitably identified and described, is in a suitable format and medium, and is reviewed and approved as fit and adequate.

Maintained by Gerard BlokdykControl text last updated

What else in your programme already covers this

This control maps to 37 controls across 22 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

PCI DSS 4.0 · 9 controls

  • 1.1.1 1.1.1 Requirement 1 policies and procedures governed
  • 11.1.1 11.1.1 Requirement 11 policies and procedures managed
  • 12.1.1 12.1.1 Overall information security policy established and disseminated
  • 2.1.1 2.1.1 Requirement 2 policies and procedures governed
  • 4.1.1 4.1.1 Requirement 4 policies and procedures maintained and communicated
  • 7.1.1 7.1.1 Requirement 7 policies and procedures maintained
  • 9.1.1 9.1.1 Requirement 9 policies and procedures maintained
  • 3.1.1 3.1.1 Requirement 3 policies and procedures maintained and in use
  • 8.1.1 8.1.1 Requirement 8 policies and procedures maintained

NIST SP 800-53 Rev 5 · 5 controls

HIPAA Security Rule · 2 controls

ISO 19011:2018 · 2 controls

  • 6.4.8 Generating audit findings
  • 6.5.1 Preparing audit report

SOC 2 · 2 controls

  • SOC2-CC5.3 CC5.3 Deploying controls through policies and procedures (COSO principle 12)
  • SOC2-CC8.1 CC8.1 Managing changes to procedures, software, data and infrastructure

C5 (Germany) · 1 control

  • C5-SP-02 Review and Approval of Policies and Instructions

CIS Controls v8 · 1 control

  • CIS-12.4 Establish and Maintain Architecture Diagram(s)

ISO 14001:2015 · 1 control

  • 7.5.2 Creating and updating

ISO 14004:2016 · 1 control

  • 7.5.2 Creating and updating

ISO 22000:2018 · 1 control

  • 7.5.2 Creating and updating

ISO 27001:2022 · 1 control

  • 5.37 Documented operating procedures

ISO 27002:2022 · 1 control

  • 5.37 Documented operating procedures

ISO 27701:2019 · 1 control

  • 7.5.2 Countries and international organizations to which PII can be transferred

ISO 37001:2016 · 1 control

  • 7.5.2 7.5.2 Creating and updating

ISO 37301:2021 · 1 control

  • 7.5.2 Creating and updating documented information

ISO 45001:2018 · 1 control

  • 7.5.2 Creating and updating
  • 7.5.2 Creating and updating

ISO 9001:2015 · 1 control

  • 7.5.2 Creating and updating

ISO/IEC 42001:2023 · 1 control

  • 7.5.2 Creating and updating documented information

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Support, ISO 22301:2019

You are reading one control. How much of ISO 22301:2019 have you already done?

ISO 22301:2019 7.5.2 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ISO 22301:2019 your existing evidence covers. Hold APRA CPS 230 Operational Risk Management and 28 of 57 ISO 22301:2019 controls already carry evidence.

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the APRA CPS 230 Operational Risk Management pair alone.

Query this from an agent

The graph holds this control, the 37 it maps to, and the evidence behind each claim, over MCP and REST.