ISMS Verification Report Format

DOE-HDBK-3027-99

2. Signature Page - A signature page should be provided. The signatures on the final

report should include all team members. Signatures by individual team members

signify their agreement as to the report content and conclusion in the areas to which

they were assigned. In the event all team member signatures cannot be obtained due to

logistical considerations, the Team Leader should gain their concurrence via fax or

telcon and sign for them.

3. Table of Contents - A Table of Contents should be provided to facilitate reviewing

the report. The Table of Contents should identify, with page numbers, all sections and

subsections of the report, illustrations, charts, and appendices.

4. Executive Summary - An executive summary is recommended. This summary is a

one to three page synopsis of the review, findings, and conclusions of the verification.

The executive summary should introduce information and direct the reader to those

portions of the report that provide more detail concerning the information. Some

suggested points for the executive summary include:

C a brief synopsis of the verification, which provides information concerning the

team's evaluation;

C a conclusion that the ISMS Description is adequate and a recommendation that

the Description should be approved or the actions required to correct

discrepancies or inadequacies of the ISMS Description before it can be

approved (Phase I), or an assessment of the state of implementing ISMS (Phase

II);

C a discussion of noteworthy practices and opportunities for improvement; and

C the adequacy of the management system which provides direction for the

ISMS.

5. Introduction - An introduction should provide information and background

regarding the site, facility, or activity being reviewed. This should include any specific

requirements the Approval Authority has communicated to the team for the review.

Additionally, the phase or the segment within a phase should be discussed as required.

Other information that may be provided include a brief discussion of:

C the overall objectives of the verification,

C the review process and methodologies used in the verification,

C the team composition, and

C definitions applicable to the review.

A-7-4