A suitable set of documentation, including a communications maksat, needs to be maintained in order to support the success of the ISMS. Resources are allocated and competency of resources is managed and understood. What is hami? written down does not exist, so standard operating procedures