ISO 27001 RACI Example

This RACI example can be used by organizations to define and demonstrate the various roles and responsibilities within their ISMS (+PIMS). It is not required by ISO 27001 or ISO 27701, but you may find it to be a helpful tool.

Commonly associated evidence:

• ISMS (+PIMS) Roles

Who needs a policy like this?

• Organizations that adhere to ISO 27001 and ISO 27701

How to use the template:

• Click on the link above to access the template

  • If you are a Google Workplace organization, make a copy by going to File > Make a copy

  • If you are not a Google Workplace organization, download a copy by going to File > Download and selecting your preferred file type (available as DOCX, PDF, and more)

• Review and then remove instructional text

• Save in a centralized place

• Attach to evidence either through Integrations, Automated Collection, or direct upload

If you need help using the template, please let us know.