ISO 27001 ยท Clause 8

The four workstreams that run your ISMS

Operational Plan
Recurring Clause 8.1

Scheduled control operation, rolled forward and reviewed each year.

Risk Treatment
Risk-driven Clause 8.3

Every to-do from your risk assessment and treatment process.

Corrective Action Log
Ongoing Clause 10.2

CAPA from audits, KPIs and reviews โ€” logged and closed with evidence.

ISMS Tasks
One-off General

The catch-all for everything that fits nowhere else.