Annex A

The auditor examines whether the resources required to set up, run, maintain and keep improving the ISMS were determined and provided, through budgets, staffing, tooling and the resource discussions in management review.

For tools and languages the table lists a suitable programming language and a strongly typed language (HR at every SIL), a language subset (HR at SIL 3 and 4), and either certified tools and translators or tools and translators with increased confidence from u...

Every audit team member knows ISO/IEC 42001 and the further normative documents the certification relies on, how AIMS documentation is typically structured with its levels and links, and the certification schemes that apply with their evaluation criteria;

Input: all necessary controls (8.3). Action: compare them with the controls in 27001:2022 Annex A. Trigger: formulating treatment plans makes finding any missing controls necessary. Output: all controls applicable to treatment.

Documented procedures exist for seven activities: transport scheduling, handling, the stun and stick, emergency kills and humane destruction, care of animals in an emergency, welfare monitoring, and foetal blood collection.

The measurement information model of ISO/IEC 15939 (Figure A.1) can be applied to an ISMS: it ties an information need to the entities that matter (for example processes, controls, documented information, systems, devices, resources and personnel;