ISO 27001 Legal Register Template
The ISO 27001 legal register is the first step towards being legally compliant. It is a core document of the information security management system (ISMS) and a requirement of the ISO 27001:2022 standard.
It’s used to identify which laws apply to your organisation, what contractual requirements customers have placed on you, what regulatory requirements there maybe and what standards you are working towards.
It is used to evidence that they have been reviewed, agreed and signed off and to show when they will next be reviewed.
We need a legal register to comply with laws, regulations and customer requirement. Ignorance of the law is not a defence in most legal jurisdictions. Of course, we are not lawyers, and always recommend that you seek professional legal advice.
Having this can protect your reputation, avoid fines and penalties and be compliant.
The main elements of an ISO 27001 legal register are a list of all of the relevant laws and regulations, when they were reviewed and by whom.
Why use an ISO 27001 Legal Register Template?
The main benefit of using an ISO 27001 legal register template is the amount of time that it will save in researching, writing and populating. Of course you should get legal advice on the contents of the register but having a register that is laid out with examples is a massive time saver. In addition it is designed for compliance with ISO 27001:2022, ISO 27001:2013, SOC2, PCIDSS. The legal register template comes pre populated with common, example UK Laws so it’s easy for anyone in any industry or sector use this document as a starting point for their own legal register.
ISO 27001 Legal Register Template Example
ISO 27001 Legal Register Template FAQ
The ISO 27001 Legal Register Template is an Excel spreadsheet that has been created to record all of the laws that apply to you for the information security and protection of data. It is designed to save you time and fast track your implementation.
You need the ISO 27001 Legal Register as part of your ISO 27001 certification as it is a mandatory document. Without the ISO 27001 Legal Register you will not be able to evidence that you are meeting the laws that apply to you and that the controls that you have implemented meet those laws and you will not certify to ISO 27001.
The ISO 27001 Legal Register is the list laws that apply to you. It is a fundamental document of ISO 27001 certification and of the information security management system.
The ISO 27001 Legal Register Template fully supports ISO/IEC 27001:2013 and ISO/IEC 27002:2013 and ISO/IEC 27002:2022.
The purpose of the ISO 27001 Legal Register Template is to clearly communicate what information security laws you have implemented to employees, clients, auditors and interested parties. It is populated with example laws to fast track your implementation.
Anyone that wants to save time and money and have a pre populated ISO 27001 Legal Register that fully meets the requirements of the ISO 27001 standard and is ready to go.
The benefits of using the ISO 27001 Legal Register Template are: Save time: the template is already populated with example laws and ready to go Meet the requirements of the standard: the template is mapped directly to the requirements of the ISO 27001:2022 standard Save money: you will not have to pay consultants to research and write the legal register for you
The ISO 27001 Legal Register Template meets the requirements of ISO 27001 Legal, statutory, regulatory and contractual requirements: Annex A 5.31
The ISO 27001 Legal Register Template is in Microsoft Excel format
The legal register template fully supports ISO/IEC 27001:2022 and ISO/IEC 27001:2013.
You will require the support of a legal professional to verify the contents of the ISO 27001 legal register and the exact laws that apply to you.
You can download the ISO 27001 Legal Register Template PDF
It would be our advice to populate the legal register based on legal advice. The template provides example laws but does not represent legal advice.
If you mean actual laws that apply to you rather than laws you are making up then yes and you should.
Yes as it is just a template. The example laws may not be relevant but it is not designed to provide legal advice. It will work in your country and you populate it with laws relevant to you.
We estimate that on average about 15 minutes.
The cost of the ISO 27001 Legal Register Template is £14.97. The price can vary depending on currency exchange rates and the running of promotions and offers.
The ISO 27001 Legal Register Template covers: The laws that apply to you Contractual requirements that apply to you Regulations that apply to you
ISO 27001 Legal Register Beginner’s Guide is the complete guide to the ISO 27001 Legal Register and includes everything you need to know.
You get the Legal Register immediately on successful payment.
We offer a free 30 minutes, 1 to 1 consultation as well as a free weekly ISO 27001 Q and A call and the unique ability to purchase consulting by the hour.
Yes. The ISO 27001 Legal Register Template supports the International Standard for Information Security. It is being used successfully right now across the globe.
Payments are handled entirely through Stripe. They are very secure. We do not handle the payment transaction. We do not store, process or transmit your card holder data.
Related ISO 27001 Controls
Further Reading
