[organization name] [confidentiality level]

Appendix – Specification of Information System Requirements

** FREE PREVIEW VERSION **

Name of information system:

… * Commented [EU GDPR1]: In case a new information system

was acquired, write "New information system".

… * Commented [EU GDPR2]: Copy the level of the assessed

impact for this information asset from the Risk Assessment Table.

…  * Commented [EU GDPR3]: Definition of what the system

should produce (what serves as input, how it is processed, what is
the output), its capacity, performance, user interface layout, etc.
Necessary automated controls:  *
Commented [EU GDPR4]: List all necessary controls which
 need to be integrated into the information system - e.g. …

…  * Commented [EU GDPR5]: List all necessary controls which …


… * Commented [EU GDPR6]: E.g. internal testing …

** END OF FREE PREVIEW **

To download full version of this document click here:

https://advisera.com/27001academy/documentation/specification-of-information-system-
requirements/

Appendix – Specification of Information System ver [version] from [date] Page 1 of 1

Requirements

©2017 This template may be used by clients of Advisera Expert Solutions Ltd. www.advisera.com in accordance with the License
Agreement.