Training, Advising, and Mentoring of DOE Staff

DOE-HDBK-3027-99

X Management and successful completion of a combined review is difficult, but can be

accomplished.

X A combined review takes less total time and can result in a reduced impact on the site,

although a combined verification is more demanding on the team and those organizations

being verified.

X If the site, facility, activity has truly achieved a mature ISMS implementation, the benefits

of a combined verification outweigh the difficulty.

X The verification team should include several team members in each functional area with

previous ISMS Verification experience.

X A sub-team leader who has previous ISMS verification experience should be assigned to

each verification Functional Area

X Contractor and DOE efforts to fully and effectively prepare for and support the

verification effort must be assured before making a commitment to a combined

verification.

To be successful, the conduct of a combined verification must be carefully planned, by the

verification Team and by the contractor and DOE. Figures 1 and 2 portray the Phase I and Phase

II planning considerations as well as the dependency of Phase II aspects upon Phase I. The

presentations to the team must provide information on both the policies and procedures

(implementation mechanisms) that implement the ISMS Description as well as the work site's

implementation of those mechanisms. The members of the verification team focusing on the

Phase II portion of the review must understand the implementing mechanisms prior to focusing

on the Phase II aspects. One section of Appendix 5, Lessons Learned, discusses a combined

verification in detail.

Experience has also shown that a combined verification may not be successful when there are

gaps in the implementing policies and procedures. Similarly, the combined verification may not

be meaningful if the implementation has only progressed at a few pilot facilities.

Careful review and candid judgement is required when making the decision whether to conduct a

combined verification. If the conditions are met for a successful combined verification, it is

recommended that a combined verification be conducted. The overall savings of time, effort, and

distractions at the site will be worth the extra effort associated with the combined verification.

5.5 Training, Advising, and Mentoring of DOE Staff

The following sections describe the principles and methodologies for the development of staff

capabilities to integrate ISMS throughout the DOE complex.