The ISO 9001:2015 changes mean that existing internal and external audit checklists have to be updated.  These checklists may be used initially for gap analysis, then updated for internal audit,

Stage 1 (documentation review) and Stage 2 Certification audits and for any subsequent Management System changes.

Here are example checklists for ISO 9001:2015 Quality Management Systems and ISO 22301:2012 Business Continuity Management Systems (BCMSs).

Further BCMS, NIST and COBIT guidance is given in

 

• ISO 22313:2012 Societal security — Business continuity management systems — Guidance
• ISO/TS 22317:2015 Societal security — Business continuity management systems — Guidelines for business impact analysis (BIA)
• APRA – Prudential Standard CPS 232 Business Continuity Management http://www.apra.gov.au/CrossIndustry/Documents/Prudential%20Standard%20CPS%20232%20Business%20Continuity%20Management.pdf
• US Government Cloud Computing Technology Roadmap Volume I: High-Priority Requirements to Further USG Agency Cloud Computing Adoption; and Volume II: Useful Information for Cloud Adopters         http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.500-293.pdf
• US Government Cloud Computing Technology Roadmap Volume III, Technical Considerations for USG Cloud Computing Deployment Decisions http://www.nist.gov/itl/cloud/upload/NIST_cloud_roadmap_VIII_draft_110111-v3_rbb.pdf
• NIST Special Publication 800 – 37 Revision 1, Guide for Applying the Risk Management Framework to Federal Information Systems : A Security Life Cycle Approach                                                                                                    http://csrc.nist.gov/publications/nistpubs/800-37-rev1/sp800-37-rev1-final.pdf
• NIST Cybersecurity Framework (CSF) – provides a mapping from the CSF to COBIT 5, ISO 27001:2013 and other Standards http://www.nist.gov/cyberframework/upload/cybersecurity-framework-021214-final.pdf
• Extending COBIT 5 Data Security and Governance Guidance http://links.e.isaca.org/ctt?kn=5&ms=MTQyNjIxNjkS1&r=MTIzMTYwNTU0MzA4S0&b=0&j=OTIzNDQ4MzYyS0&mt=1&rt=0

Downloadable PDF Checklists

ISO 9001 2015 checklist Stage1

BCMS ISO 22301 checklist Stage1

 

---