We are looking for an experienced ISO consultant or technical writer to develop system documentation for ISO 27001 (Information Security Management System) and ISO 20000-1 (IT Service Management System). • The client already has implemented an Integrated Management System (IMS) and Business Continuity Management (BCM – ISO 22301). • We need only the minimum required documents and records related to ISO 27001:2022 & ISO/IEC 20000-1:2018.
Required Deliverables: Procedures / Policies: • Asset Management & Information Classification Procedure • Access Control Procedure • Backup & Restore Procedure • Information Security & IT Service Incident Management Procedure • Change Management Procedure • Disaster Recovery Plan (DRP) • Service Catalogue • Service Level Agreements (SLAs) / Operational Level Agreements (OLAs) Registers / Forms / Logs: • Asset Inventory Register • Access Control & User Privilege Register • Incident & Security Event Log ISO 27001 Annex A Mandatory Controls Documentation: • A.5 Information Security Policies • A.6 Organization of Information Security • A.7 Human Resource Security • A.8 Asset Management • A.9 Access Control • A.12 Operations Security • A.16 Information Security Incident Management • A.17 Information Security in Business Continuity (aligned with ISO 22301) Requirements for Freelancers: • Proven experience in ISO 27001 and/or ISO 20000-1 documentation.
• Ability to deliver practical, audit-ready templates (Word format). • Samples of previous work will be an advantage.
Deliverable Format: • Editable Word documents (.docx) • English language Deadline & Budget: • Maximum 2 weeks.
• Priority for freelancers with fast delivery and high-quality documentation.