Customers, regulators, staff, and suppliers do not all want the same thing. An interested-parties record says who they are, what they need, and which obligation makes that need yours to meet.
What a useful record contains
- Whether the party is internal or external.
- Their relationship to the management system.
- What they are interested in, and their needs and expectations.
- The basis of the obligation: legal, policy, contractual, regulatory, or similar.
- Who owns the record, when it was last reviewed, and what should trigger the next review.
Why link controls
A need without a control is a gap you have written down. Linking controls shows which implemented controls meet that party. How ISMSVision helps with interested parties describes the product.