Instant 27001 demo environment
snippet.sample.procedure
A.5.37 Documented operating procedures suggests that risky tasks are executed following defined procedures.
This specific procedure is not mandatory by ISO 27001, but serves as an example. Feel free to remove it, and to include (references to) your own operating procedures!