ISMS/05-guidance/README.md

ISMS Guidance Notes

This folder contains supporting guidance for applying the ISMS document set consistently.

Guidance notes are intended to help document owners, reviewers, and operational teams interpret and use the controlled documents. They do not replace policies, standards, procedures, or registers, and they must not be used to override controlled requirements.

Current Guidance Set

• document-owner-guidance.md
• evidence-and-audit-readiness-guidance.md
• risk-and-exception-writing-guidance.md
• supplier-assurance-guidance.md
• secure-change-and-deployment-guidance.md

How To Use Guidance

• Start with the relevant policy, standard, procedure, or register.
• Use the guidance note to understand expected depth, evidence quality, and practical interpretation.
• Where guidance appears to conflict with a controlled document, the controlled document takes precedence.