Mapping Issues

: Andy Systems; System Guides; 28 April 2023

Explore Procedure for Context of the Organization

Issues Mapping is a critical component of CIMSNex, facilitating the identification, tracking, and management of issues relevant to organizational business services. By systematically mapping and analyzing issues, organizations can proactively address challenges, risks, and concerns that may impact service delivery.

Through the mapping and analysis of issues, organizations can proactively tackle challenges, risks, and concerns that might affect the successful delivery of their services. This also marks the beginning of the risk assessment process, where uncertainties or risks are identified and subsequently evaluated in the subsequent stage. This guide provides a concise overview of the fields involved in mapping Organizational, Service, and Process issues within the organization's context.

Accessing Issues Mapping

Log in to CIMSNex and navigate to the "Context" menu on the navigation bar.
Select "Issues Mapping" and click on "Create New Issue" to initiate the process.
Fill in the required fields:
- Issue No: Unique identifier or reference number assigned to the issue. It helps in tracking and referencing specific issues.
- Date of Analysis: Date when the issue was analyzed or identified. It helps in tracking the timeline of the analysis process.
- Lead Analyst: Name or identifier of the lead analyst who conducted the analysis or identified the issue. It helps in attributing responsibility and accountability.
- Context: Specifies the category or type of issue, i.e., "Process Issues," "Service Issues," or "Organizational Issues." It helps in categorizing and organizing the identified issues.
- Business Service: Indicates the specific business service to which the issue is mapped. It establishes the link between the issue and the associated service.
- SWOT Analysis: Strengths, Weaknesses, Opportunities, and Threats. A strategic framework used to assess a situation by examining its impact on the service and its relation to internal and external factors. For example, strengths and weaknesses are internal factors, while opportunities and threats are external.
- Issue Reference: Provides options for referencing issues in relation to ISO standard clause requirements. For example, if the issue pertains to competence, then select 'ISO 9001 - 7.2 Competence'; or if the Safety Policy is absent or inadequate, then select 'ISO 45001 - 5.2 OHS Policy'. Refer to the Standard Issue Reference Guide for detailed descriptions.
- Issue/Uncertainty Description: Detailed information or specific details concerning the issue or uncertainty, thereby adding more context and clarity. For example, the OHS Policy is either not established or has not been communicated.
- Interested Party: Stakeholders, which can be individuals or groups with a vested interest in resolving the issue, and may also include risk owners.
Submit the form to create the issue entry. After clicking the submit button, the risk will be created and ready for evaluation.

Viewing Issue Reports

Navigate to the "Context" menu and select "Issues Mapping."
Click on "View Issues Register" to access the register of issues and their details.

Standard Issue Reference Guide

ISO 9001 - QMS

Clause	Description
9001 - 10.2	Procedures for addressing corrective and preventive actions to rectify nonconformities and prevent their recurrence within the quality management system.
9001 - 10.3	Commitment to ongoing improvement of the effectiveness and performance of the quality management system.
9001 - 4.1	Understanding the organization's internal and external context, including factors that may affect its ability to achieve quality objectives.
9001 - 4.2	Identification and analysis of internal and external issues relevant to the organization's quality management.
9001 - 4.3	Determination of the boundaries and applicability of the quality management system within the organization.
9001 - 4.4	Establishment, implementation, and maintenance of processes to ensure quality management throughout the organization.
9001 - 5.1	Demonstration of leadership's commitment to quality by actively promoting and supporting the quality management system.
9001 - 5.2	Development and communication of a quality policy that outlines the organization's commitment to meeting customer requirements and enhancing customer satisfaction.
9001 - 5.3	Clarification of roles, responsibilities, and authorities concerning quality management within the organization.
9001 - 6.1	Identification and assessment of risks and opportunities that may affect the conformity of products and services and the ability to enhance customer satisfaction.
9001 - 6.2	Establishment of measurable quality objectives to ensure alignment with the organization's quality policy and strategic goals.
9001 - 6.3	Planning and management of changes to the quality management system to maintain its integrity and effectiveness.
9001 - 7.1.1	Provision of general resources necessary to support the operation and control of processes within the quality management system.
9001 - 7.1.2	Provision of personnel with the necessary skills, knowledge, and competence to carry out their assigned tasks effectively.
9001 - 7.1.3	Provision and maintenance of infrastructure required to support the operation of processes within the quality management system.
9001 - 7.1.4	Ensuring the provision of an environment suitable for the operation of processes to achieve conformity of products and services.
9001 - 7.1.5	Provision and maintenance of resources necessary to monitor and measure the performance of processes within the quality management system.
9001 - 7.2	Ensuring personnel possess the required competence to perform their duties effectively and contribute to quality objectives.
9001 - 7.3	Promoting awareness of quality policy, objectives, and processes among personnel to ensure their understanding and commitment to quality management principles.
9001 - 7.4	Establishment of effective communication channels to facilitate the exchange of information related to quality management within the organization.
9001 - 7.5	Management of documented information necessary for the effective operation and control of processes within the quality management system.
9001 - 8.1	Planning and controlling operational activities to ensure they meet quality requirements and achieve desired outcomes.
9001 - 8.2	Identification and management of requirements related to products and services to ensure they meet customer needs and expectations.
9001 - 8.3	Planning, design, and development of products and services to meet quality objectives and customer requirements.
9001 - 8.4	Control of externally provided processes, products, and services to ensure they conform to specified requirements.
9001 - 8.5.1	Implementation of controls to ensure the effective production and provision of products and services according to quality requirements.
9001 - 8.5.2	Identification and traceability of products and services throughout the production and service provision process.
9001 - 8.5.3	Management of property belonging to customers or external providers to prevent loss, damage, or unauthorized use.
9001 - 8.5.4	Implementation of measures to preserve the conformity of products and services during handling, storage, and transportation.
9001 - 8.5.5	Management of post-delivery activities to ensure customer satisfaction and address any issues or concerns that may arise after product or service delivery.
9001 - 8.6	Control and release of products and services to ensure they meet quality requirements before being delivered to customers.
9001 - 8.7	Control of nonconforming outputs to prevent their unintended use or delivery and to take appropriate corrective actions as necessary.
9001 - 9.1	Monitoring, measuring, analyzing, and evaluating processes, products, and services to ensure conformity and drive continual improvement.
9001 - 9.2	Conducting internal audits to assess the conformity and effectiveness of the quality management system and identify areas for improvement.
9001 - 9.3	Reviewing the performance and effectiveness of the quality management system by top management to ensure its continued suitability, adequacy, and effectiveness.

ISO 45001 - OHSMS

Clause	Description
45001 - 10.2	Procedures for managing incidents, nonconformities, and implementing corrective actions within the occupational health and safety (OH&S) management system.
45001 - 10.3	Commitment to ongoing improvement of the effectiveness and performance of the OH&S management system.
45001 - 4.1	Understanding the internal and external factors that influence the organization's OH&S management.
45001 - 4.2	Identification and analysis of the needs and expectations of workers and other interested parties regarding occupational health and safety.
45001 - 4.3	Determination of the boundaries and applicability of the OH&S management system within the organization.
45001 - 4.4	Establishment, implementation, and maintenance of the OH&S management system to ensure a safe and healthy work environment.
45001 - 5.1	Demonstration of leadership's commitment to effective OH&S management within the organization.
45001 - 5.2	Development and communication of policies outlining the organization's approach to occupational health and safety.
45001 - 5.3	Clarification of roles, responsibilities, and authorities concerning OH&S within the organization.
45001 - 5.4	Facilitation of worker consultation and participation in matters related to occupational health and safety.
45001 - 6.1	Proactive identification and addressing of risks and opportunities related to occupational health and safety.
45001 - 6.1.2	Identification and assessment of hazards, and evaluation of risks and opportunities to improve OH&S performance.
45001 - 6.1.3	Determination and compliance with legal and other requirements relevant to occupational health and safety.
45001 - 6.2	Establishment of measurable objectives and plans to enhance OH&S performance and prevent workplace injuries and illnesses.
45001 - 7.1	Provision of necessary resources to support the implementation and maintenance of the OH&S management system.
45001 - 7.2	Ensuring personnel possess the required competence to fulfill their roles in promoting occupational health and safety.
45001 - 7.3	Promoting awareness of OH&S policies, procedures, and risks among workers and relevant stakeholders.
45001 - 7.4	Establishing effective communication channels to disseminate information related to occupational health and safety within the organization.
45001 - 7.4.2	Facilitating internal communication mechanisms to address OH&S issues and exchange relevant information.
45001 - 7.4.3	Establishing mechanisms for communicating OH&S information to external parties, such as suppliers, contractors, and regulatory authorities.
45001 - 7.5	Management of documented information necessary for the effective operation of the OH&S management system.
45001 - 8.1.2	Identifying hazards and implementing controls to eliminate or reduce OH&S risks in the workplace.
45001 - 8.1.3	Managing changes in processes, procedures, or equipment to ensure they do not adversely affect OH&S performance.
45001 - 8.1.4	Procurement processes to ensure that goods and services acquired meet OH&S requirements and standards.
45001 - 8.2	Establishment of plans and procedures to respond effectively to emergencies that could impact occupational health and safety.
45001 - 9.1	Systematic monitoring, measurement, analysis, and performance evaluation of OH&S performance and outcomes.
45001 - 9.1.2	Evaluation of compliance with applicable legal and other requirements related to occupational health and safety.
45001 - 9.2	Conducting internal audits to assess the conformity and effectiveness of the OH&S management system.
45001 - 9.3	Periodic review by top management to ensure the continued suitability, adequacy, and effectiveness of the OH&S management system.

ISO 27001 - ISMS

Clause	Description
27001 - 10.1	Commitment to ongoing improvement of the effectiveness and performance of the information security management system.
27001 - 10.2	Procedures for addressing nonconformities within the information security management system and implementing corrective actions.
27001 - 4.1	Understanding the internal and external factors that influence the organization's information security management.
27001 - 4.2	Identification and analysis of the needs and expectations of stakeholders relevant to information security.
27001 - 4.3	Determination of the boundaries and applicability of the information security management system within the organization.
27001 - 5.2	Development and communication of policies outlining the organization's approach to information security.
27001 - 5.3	Clarification of roles, responsibilities, and authorities concerning information security within the organization.
27001 - 6.1	Proactive identification and addressing of risks and opportunities related to information security.
27001 - 6.2	Establishment of measurable objectives and plans to enhance the confidentiality, integrity, and availability of information.
27001 - 7.1	Provision of necessary resources to support the implementation and maintenance of the information security management system.
27001 - 7.2	Ensuring personnel possess the required competence to fulfill their roles in implementing information security measures.
27001 - 7.3	Promoting awareness of information security policies, procedures, and risks among personnel.
27001 - 7.4	Establishing effective communication channels to disseminate information related to information security within the organization.
27001 - 7.5	Management of documented information necessary for the effective operation of the information security management system.
27001 - 8.1	Planning and controlling operational activities to ensure they align with information security objectives and requirements.
27001 - 9.1	Systematic monitoring, measurement, analysis, and evaluation of information security performance and outcomes.
27001 - 9.2	Conducting internal audits to assess the conformity and effectiveness of the information security management system.
27001 - 9.3	Periodic review by top management to ensure the continued suitability, adequacy, and effectiveness of the information security management system.
27001 - Access Controls	Implementing controls to ensure authorized access to information and information systems, preventing unauthorized access.
27001 - Asset Management	Management of assets (both physical and digital) to ensure their confidentiality, integrity, and availability.
27001 - Compliance	Ensuring compliance with relevant laws, regulations, and contractual requirements related to information security.
27001 - Cryptography	Protection of information through encryption, decryption, digital signatures, and other cryptographic techniques.
27001 - Human Resource Security	Ensuring that personnel understand their roles and responsibilities in safeguarding information and providing appropriate training.
27001 - Information Security Incident Management	Handling information security incidents promptly and effectively to minimize impact and prevent recurrence.
27001 - IT Operational Security	Implementing controls to ensure the secure operation of information processing facilities and infrastructure.
27001 - Network Security	Protecting the network infrastructure and information transmitted over networks from unauthorized access and attacks.
27001 - Physical and Environmental Security	Securing physical premises, equipment, and facilities to prevent unauthorized access, damage, or interference.
27001 - Supplier Relationships	Managing relationships with suppliers to ensure they meet information security requirements and standards.
27001 - Systems Acquisition, Development and Maintenance	Implementing security measures throughout the lifecycle of information systems, from acquisition to disposal.

ISO 20000 - ITSMS

Clause	Description
20000 - 4.1	Understanding the internal and external factors that shape the organization's service management system.
20000 - 4.2	Identification and analysis of the needs and expectations of stakeholders relevant to service management.
20000 - 4.3	Defining the boundaries and applicability of the service management system within the organization.
20000 - 4.4	Establishment, implementation, and maintenance of the service management system to meet organizational objectives.
20000 - 5.1	Demonstration of leadership's commitment to effective service management within the organization.
20000 - 5.2	Development and communication of policies outlining the organization's approach to IT service management.
20000 - 5.3	Clarification of roles, responsibilities, and authorities concerning service management within the organization.
20000 - 6.1	Proactive identification and addressing of risks and opportunities related to service management.
20000 - 6.2	Establishment of measurable objectives to improve the efficiency and effectiveness of service management processes.
20000 - 6.3	Planning the implementation and management of the service management system to achieve organizational goals.
20000 - 7.1	Provision of necessary resources to support the implementation and maintenance of the service management system.
20000 - 7.2	Ensuring personnel possess the required competence to fulfill their roles within the service management system.
20000 - 7.3	Promoting awareness of service management policies, procedures, and objectives among personnel.
20000 - 7.4	Establishing effective communication channels to facilitate information exchange within the organization.
20000 - 7.5	Management of documented information required for the effective operation of the service management system.
20000 - 7.6	Managing organizational knowledge related to service management processes and activities.
20000 - 8.1	Planning and controlling operational activities to ensure they align with service management objectives and requirements.
20000 - 8.2.3	Control and management of third-party entities involved in the service lifecycle to ensure alignment with organizational goals.
20000 - 8.2.4	Management of a catalogue containing details of services offered to customers.
20000 - 8.2.5	Management of assets used to deliver IT services, ensuring their optimization and accountability.
20000 - 8.3.2	Managing and maintaining positive relationships with business partners to support service delivery.
20000 - 8.3.3	Negotiation, establishment, and monitoring of service level agreements (SLAs) with customers.
20000 - 8.3.4	Management of suppliers and vendors to ensure the quality and reliability of services and products.
20000 - 8.4.1	Allocation and management of budgets related to the delivery of IT services to ensure financial efficiency.
20000 - 8.4.3	Planning, monitoring, and optimizing the capacity of IT resources to meet current and future demands.
20000 - 8.5.1	Procedures for assessing, approving, and implementing changes to IT services in a controlled manner.
20000 - 8.5.3	Planning, coordinating, and executing the deployment of new or changed IT services into the live environment.
20000 - 8.6.1	Timely resolution of incidents to minimize their impact on service quality and business operations.
20000 - 8.6.2	Handling and fulfilling service requests from users efficiently and effectively.
20000 - 8.6.3	Identification, analysis, and resolution of underlying causes of recurring incidents to prevent their recurrence.
20000 - 8.7.1	Ensuring the availability of IT services to meet agreed-upon service levels and business needs.
20000 - 8.7.2	Planning and implementing measures to ensure the continuity of critical IT services in the event of disruptions.
20000 - 8.7.3	Implementation of measures to protect the confidentiality, integrity, and availability of information assets.
20000 - 9.1	Systematic monitoring, measurement, analysis, and evaluation of service management performance and outcomes.
20000 - 9.2	Conducting internal audits to assess the conformity and effectiveness of the service management system.
20000 - 9.3	Periodic review by top management to ensure the continued suitability, adequacy, and effectiveness of the service management system.
20000 - 9.4	Compilation and dissemination of reports on service management performance, trends, and improvement initiatives.

ISO 22301 - BCMS

Clause	Description
22301 - 10.1	Procedures for addressing nonconformities within the business continuity management system and implementing corrective actions.
22301 - 10.2	Commitment to ongoing improvement of the effectiveness and performance of the business continuity management system.
22301 - 4.1	Understanding the internal and external factors that influence the organization's business continuity management.
22301 - 4.2	Identification and analysis of the needs and expectations of stakeholders relevant to business continuity.
22301 - 4.2.2	Understanding and compliance with legal and regulatory requirements relevant to business continuity.
22301 - 4.3	Determination of the boundaries and applicability of the business continuity management system within the organization.
22301 - 4.4	Establishment, implementation, and maintenance of the business continuity management system to ensure organizational resilience.
22301 - 5.1	Demonstration of leadership's commitment to effective business continuity management within the organization.
22301 - 5.2	Development and communication of policies outlining the organization's approach to business continuity.
22301 - 5.3	Clarification of roles, responsibilities, and authorities concerning business continuity within the organization.
22301 - 6.1	Proactive identification and addressing of risks and opportunities related to business continuity.
22301 - 6.2	Establishment of measurable objectives and plans to ensure continuity of critical functions during disruptions.
22301 - 6.3	Planning and managing changes to the business continuity management system to maintain effectiveness.
22301 - 7.1	Provision of necessary resources to support the implementation and maintenance of the business continuity management system.
22301 - 7.2	Ensuring personnel possess the required competence to fulfill their roles in implementing business continuity measures.
22301 - 7.3	Promoting awareness of business continuity policies, procedures, and risks among personnel.
22301 - 7.4	Establishing effective communication channels to disseminate information related to business continuity within the organization.
22301 - 7.5	Management of documented information necessary for the effective operation of the business continuity management system.
22301 - 8.1	Planning and controlling operational activities to ensure they align with business continuity objectives and requirements.
22301 - 8.2	Conducting business impact analysis and risk assessments to identify critical functions and vulnerabilities.
22301 - 8.3	Development and implementation of strategies and solutions to maintain critical functions during disruptions.
22301 - 8.3.4	Identification and allocation of resources required to support business continuity strategies and solutions.
22301 - 8.4	Development and documentation of business continuity plans and procedures to guide response and recovery efforts.
22301 - 8.5	Establishment and execution of an exercise program to test and validate business continuity plans and capabilities.
22301 - 8.6	Evaluation of the documentation and capabilities of the business continuity management system to ensure effectiveness.
22301 - 9.1	Systematic monitoring, measurement, analysis, and evaluation of business continuity performance and outcomes.
22301 - 9.2	Conducting internal audits to assess the conformity and effectiveness of the business continuity management system.
22301 - 9.3	Periodic review by top management to ensure the continued suitability, adequacy, and effectiveness of the business continuity management system.

ISO 14001 - EMS

Clause	Description
14001 - 10.2	Guidelines for handling nonconformities within the environmental management system and corrective actions to address them.
14001 - 4.1	Understanding the organization's internal and external context to shape the environmental management system.
14001 - 4.2	Identification of the needs and expectations of stakeholders relevant to the environmental management system.
14001 - 4.3	Process for determining the boundaries and applicability of the environmental management system.
14001 - 4.4	Establishment, implementation, maintenance, and continual improvement of the environmental management system.
14001 - 5.1	Demonstration of leadership and commitment to environmental management from top management.
14001 - 5.2	Development and communication of the organization's environmental policy to stakeholders and interested parties.
14001 - 5.3	Clarification of roles, responsibilities, and authorities concerning environmental management within the organization.
14001 - 6.1	Proactive identification and addressing of risks and opportunities related to environmental aspects.
14001 - 6.1.2	Identification and evaluation of environmental aspects within the organization's control or influence.
14001 - 6.1.3	Understanding and fulfillment of compliance obligations related to environmental aspects.
14001 - 6.2	Establishment of measurable environmental objectives consistent with the environmental policy.
14001 - 7.1	Provision of necessary resources to establish, implement, maintain, and improve the environmental management system.
14001 - 7.2	Ensuring that personnel have the necessary competence to fulfill their environmental responsibilities effectively.
14001 - 7.3	Promoting awareness of the environmental policy, objectives, and individual roles within the organization.
14001 - 7.4.2	Facilitating effective communication within the organization regarding environmental management issues.
14001 - 7.4.3	Establishing mechanisms for communicating environmental information externally to relevant stakeholders.
14001 - 7.5	Management of documented information required for the effective operation of the environmental management system.
14001 - 8.1	Planning and controlling operational processes to ensure they contribute to the environmental objectives.
14001 - 8.2	Preparation and response to emergencies that can impact the environment, ensuring timely and effective actions.
14001 - 9.1	Systematic approach to monitoring, measuring, analyzing, and evaluating environmental performance.
14001 - 9.1.2	Evaluation of the organization's compliance with applicable legal and other requirements related to environmental aspects.
14001 - 9.2	Conducting internal audits to assess the effectiveness of the environmental management system.
14001 - 9.3	Periodic review by top management to ensure the continued suitability, adequacy, and effectiveness of the environmental management system.
14001 - 10.3	Commitment to continual improvement of the environmental management system's performance through corrective actions and other measures.

ISO 18788 - SOMS

Clause	Description
18788 - 10.1	Procedures for addressing nonconformities within the security operations management system and implementing corrective actions.
18788 - 10.2	Commitment to ongoing improvement of the security operations management system's effectiveness and performance.
18788 - 4.1.2	Understanding the internal factors that influence the security operations management system.
18788 - 4.1.3	Identification and consideration of external factors relevant to the security operations management system.
18788 - 4.1.4	Mapping and analyzing the supply chain and subcontractors to assess security risks and vulnerabilities.
18788 - 4.1.5	Establishment of criteria for evaluating and managing security risks within the organization.
18788 - 4.2	Recognition of the needs and expectations of stakeholders regarding security operations management.
18788 - 4.3	Determination of the boundaries and applicability of the security operations management system.
18788 - 4.4	Establishment, implementation, and maintenance of the security operations management system to address security risks effectively.
18788 - 5.1	Demonstration of leadership's commitment to effective security operations management within the organization.
18788 - 5.1.2	Declaration of the organization's conformity to applicable security operations standards and regulations.
18788 - 5.2	Development and communication of policies outlining the organization's approach to security operations.
18788 - 5.3	Clarification of roles, responsibilities, and authorities concerning security operations within the organization.
18788 - 6.1.2	Identification and compliance with legal and other requirements relevant to security operations.
18788 - 6.1.3	Communication and consultation with internal and external stakeholders regarding security risks.
18788 - 6.2	Establishment of measurable objectives to enhance the effectiveness and efficiency of security operations.
18788 - 7.1	Provision of resources necessary to support the implementation and maintenance of security operations.
18788 - 7.2	Ensuring personnel possess the required competence to perform security-related tasks effectively.
18788 - 7.3	Promoting awareness of security policies, procedures, and risks among personnel within the organization.
18788 - 7.4	Establishing effective communication channels to disseminate security-related information within the organization.
18788 - 7.4.5	Communication of policies and procedures regarding the reporting of misconduct or violations within the organization.
18788 - 7.5	Management of documented information necessary for the effective operation of security operations.
18788 - 8.1	Planning and controlling operational activities to ensure they align with security objectives and standards.
18788 - 8.2	Establishment of norms of behavior and ethical codes to guide the conduct of personnel involved in security operations.
18788 - 8.3	Guidelines for the appropriate use of force in security operations, ensuring compliance with legal and ethical standards.
18788 - 8.4	Procedures for the lawful apprehension and search of individuals, maintaining respect for their rights and dignity.
18788 - 8.5	Coordination and cooperation with law enforcement agencies to support security operations effectively.
18788 - 8.6	Allocation of resources, assignment of roles, and delegation of authority to support security operations efficiently.
18788 - 8.7	Implementation of measures to ensure the health and safety of personnel involved in security operations.
18788 - 8.8	Procedures for managing security incidents effectively, minimizing their impact and preventing recurrence.
18788 - 9.1	Systematic monitoring, measurement, analysis, and evaluation of security performance and effectiveness.
18788 - 9.1.2	Evaluation of the organization's compliance with applicable security standards and regulations.
18788 - 9.1.3	Conducting exercises and tests to assess the readiness and effectiveness of security measures and procedures.
18788 - 9.2	Conducting internal audits to assess the conformity and effectiveness of the security operations management system.
18788 - 9.3	Periodic review by top management to ensure the continued suitability, adequacy, and effectiveness of the security operations management system.

Rating:

( 0 Rating )

CIMSNex User Guides

System Guides

Mapping Issues

Accessing Issues Mapping

Viewing Issue Reports

Standard Issue Reference Guide

USER GUIDES

More Links

FEATURED SERVICES

Search