ISO 27001 RACI Example

Written By Micah

This RACI example can be used by organizations to define and demonstrate the various roles and responsibilities within their ISMS (+PIMS). It is not required by ISO 27001 or ISO 27701, but you may find it to be a helpful tool.

Commonly associated evidence:

  • ISMS (+PIMS) Roles

Who needs a policy like this?

  • Organizations that adhere to ISO 27001 and ISO 27701

How to use the template:

  • Click on the link above to access the template

    • If you are a Google Workplace organization, make a copy by going to File > Make a copy

    • If you are not a Google Workplace organization, download a copy by going to File > Download and selecting your preferred file type (available as DOCX, PDF, and more)

  • Review and then remove instructional text

  • Save in a centralized place

  • Attach to evidence either through Integrations, Automated Collection, or direct upload

If you need help using the template, please let us know.