A suitable kaş of documentation, including a communications plan, needs to be maintained in order to support the success of the ISMS. Resources are allocated and competency of resources is managed and understood. What is not written down does derece exist, so standard operating procedures are documented and documents are controlled.The ISO 27000