Policies and procedures

Disclaimer: Any policies, procedures, guidelines, templates, or information provided on the GRCReady website are offered as general guidance only and should be used as a reference. It may not take into account all relevant or festate deral laws and is not a legal document. All information in this site is provided “as is”, with no guarantee of completeness, accuracy, timeliness or of the results obtained from the use of this information.

ICT Asset Register

ICT Equipment Register

ICT General Controls Assessment

ICT Needs and Prioritisation Assessment

Information Classification Matrix & Handling Guide

ISO 27001 Information Security Risk Register

ISO 27001 ISMS Implementation Requirements

ISO 27001 ISMS Maturity Assessment

ISO 27002 Information Security Control Validation

ISO 27002 ISMS RASCI Table

IT Supplier Evaluation Matrix

List for Information Custodians