Update Details: A number of sample data registers have been updated to ensure the sample data reflects recent updates and meets audit expectations. We've also added a couple of new files.
- alphaZ Guidance Videos - a new video has been added; 'How to set-up and use the ER9 Legal Register' which as the title suggest provides some guidance on how to go about populating and keeping this file up to date.
- F-IMS22-Interested Parties Register - as detailed in previous updates there has been evidence of some increased expectations during ISO audits in terms of what evidence is required to demonstrate that compliant with the climate change requirements that were added to a number of ISO standards. To address this we've crowbarred some extra climate change references into the sample data version of the interested parties register which should tick this rather pointless box!
- F-IMS25-Information Assets Register - was reviewed and updated
- ER14 Hazard Risk Assessment Register - was updated to include a number of additional risks as detailed on the recently updated example risk assessments and as some of these included risks such as 'demolition work' and 'Mobile Elevated Work Platforms' we realised this sample data was going to be quite excessive for many companies and therefore also prepared an 'Office' version of this file which is a better starting point if you don't demolish things using a MEWP!
- ER15 Information Security Risks - this was updated in response to some audit feedback relating to consideration of cloud services where further information was required to demonstrate that the risks associated with cloud computing had been mitigated. The cloud risk on this sample data file now references a cloud computing register / cloud-emergency exit strategy - if you need these please see the last update about Cloud Computing forms
