Implementation of Controls as per SOA for Stage 2 Audit

Dean Bell

Dean Bell

Registered
#1
#1
Looking for some guidance or feedback based on previous experience regarding the implementation of controls under ISO27001 Annex A.

There are 114 controls here, which need to be considered with respect to their inclusion or exclusion on the SOA as a result of the risk assessment and treatment process.

So here's my question, during a Stage 2 audit, is it typically expected by the CB auditor that all controls have been implemented (as captured on the SOA)? Or is it sufficient to be able to simply demonstrate that a risk assessment and treatment process has been documented and implemented, even with the controls only partially implemented?

I'd imagine that the full implementation of controls for many organisations could take a very long time, so it would be common to undergo a certification audit having addressed the highest risk (therefore highest priority) risks.

Thanks in anticipation. I've implemented many HSEQ management systems through to certification over the years, but this is my first ISMS.
 
Standard Work Instruction Software by Dozuki
Elsmar Forum Sponsor
You must log in or register to reply here.
Thread starter Similar threads Forum Replies Date
C Implementation ISO 9001: 2015 ? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
S Practical Implementation of ISO 14971 ISO 14971 - Medical Device Risk Management 6
G Issues/Roadblocks with APQP implementation APQP and PPAP 7
O ISO13485 implementation - Are internal audits expected before stage 1 audit? Design and Development of Products and Processes 3
N ERP Software Implementation Manufacturing and Related Processes 3
C New to Site - Request Help with API Q2 Implementation Oil and Gas Industry Standards and Regulations 10
F Will the EU postpone 2017/745 MDR Implementation - COVID-19 Impact Medical Device and FDA Regulations and Standards News 11
J MDD to MDR transition - Time required for the implementation of the MDR EU Medical Device Regulations 7
L AS9146 Implementation and Compliance AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 5
J Looking for a template SOP for UDI implementation for EU Medical Devices EU Medical Device Regulations 0
G Defining performance metrics for DFMA implementation Design and Development of Products and Processes 2
C Design and implementation of process audits as defined within IATF 16949 IATF 16949 - Automotive Quality Systems Standard 2
B ISO 9001 Implementation Time Frame ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 19
M UDI transition period and implementation EU Medical Device Regulations 6
G Strategy for IEC62304 implementation half way into the software development process IEC 62304 - Medical Device Software Life Cycle Processes 9
M Informational EU – EMA revised guidance – Questions & Answers on Implementation of the Medical Devices and In Vitro Diagnostic Medical Devices Regulations ((EU) 201 Medical Device and FDA Regulations and Standards News 2
R ISO 13485 QMS Implementation Training ISO 13485:2016 - Medical Device Quality Management Systems 7
D Preventive Maintenance Implementation 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 5
Emran.mi Measurement system analysis - Can you help me about implementation MSA for CMM device Manufacturing and Related Processes 2
K China UDI Implementation for October 1st 2019 China Medical Device Regulations 4
R ISO 13485 QMS sequence of implementation ISO 13485:2016 - Medical Device Quality Management Systems 4
M Informational From RAPS – EU MDR/IVDR: US Raises ‘Serious Concerns,’ Urges 3-Year Implementation Delay Medical Device and FDA Regulations and Standards News 3
M Informational TGA – European implementation of Medical Device and IVD Regulations – Implications for Australia Medical Device and FDA Regulations and Standards News 0
M Informational Medtech Europe presentation – – Industry Perspective on the Implementation Status of the MDR/IVDR Medical Device and FDA Regulations and Standards News 0
M Informational EU – Employment, Social Policy, Health and Consumer Affairs Council Public session (Health) – AOB – medical devices Implementation of the regulation o Medical Device and FDA Regulations and Standards News 0
M Informational EU – Medical devices: Implementation of Regulation (EU) 2017/745 on medical devices (MDR) – Information from the Irish and German delegations Medical Device and FDA Regulations and Standards News 0
M Informational Medtech Europe – Open letter to the European Commission on the implementation and readiness status of the new Medical Device Regulation (MDR) Medical Device and FDA Regulations and Standards News 0
M Informational Publication of Draft Health Canada Implementation Guidance for the International Medical Device Regulators Forum Table of Contents Format Medical Device and FDA Regulations and Standards News 0
A New Supplier implementation - PPAP vs APQP APQP and PPAP 9
M Startup Company - Implementation of ISO 13485 ISO 13485:2016 - Medical Device Quality Management Systems 19
D AS9100D implementation question AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 9
L Implementation of ISO 27001 as part of the GDPR compliance journey Other Medical Device Related Standards 2
J Implementation of Total Quality Management/Starting a Quality Department Reliability Analysis - Predictions, Testing and Standards 9
P IATF 16949 implementation needs and requirements IATF 16949 - Automotive Quality Systems Standard 3
A Policies Mandatory or essential for ISO 27001 implementation IEC 27001 - Information Security Management Systems (ISMS) 6
A ISO/IEC 27001 - Issue during implementation of system IEC 27001 - Information Security Management Systems (ISMS) 3
A ISMS implementation - ISO 27001: 2013 Company Objectives IEC 27001 - Information Security Management Systems (ISMS) 1
V ISO 9001:2015 Implementation Packages ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 28
G IEC 61010 - Single Fault Condition - Protective Impedance Implementation IEC 60601 - Medical Electrical Equipment Safety Standards Series 1
A EMS - ISO 14001:2015 Implementation ISO 14001:2015 Specific Discussions 4
a_bardi ISO 9001:2015 - Implementation in 4 Plants Different Countries ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
A CAQ Software - Implementation of a Software for FMEA's and Control Plans FMEA and Control Plans 0
M Partial Implementation of ISO 9001 in a Company ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 13
Y TQM Implementation in Facilities Department Misc. Quality Assurance and Business Systems Related Topics 2
A ISO 9001:2015 Implementation for Marketing and Sales Companies ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 1
gunnyshore ISO 13485:2016 Implementation Plan ISO 13485:2016 - Medical Device Quality Management Systems 5
M 2016 FDA Final Guidance for Blood Glucose Monitoring Systems - Implementation Other US Medical Device Regulations 2
J What does "effective implementation of quality management system" mean? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
S API SPEC 7-1, 7-2 and 5 CT implementation Oil and Gas Industry Standards and Regulations 3
S ISO 14001:2015 Implementation in my company ISO 14001:2015 Specific Discussions 13

Similar threads

Top Bottom