Organisations are required to conduct audits to provide evidence of conformance to:
- The organisation’s own requirements for its ISMS
- The mandatory clauses of the standard (clauses 4-10)
- ISO 27001 Annex A (and other) controls which are included within the scope of the ISMS
Audits can also be aligned to processes, many of which will be been developed to meet the objectives of your ISMS and will complement the implementation of the clauses and controls of the Standard.
related BLog
No items found.
"
Our URM QSA always consults with the aim of making compliance as straightforward as possible, and pointed us towards a way of significantly minimising and streamlining our assessment scope that neither we nor our previous PCI DSS consultancy provider had considered.
CISO at University of Surrey
contact US
Let us help you
Let us help you in your compliance journey by completing the form and letting us know how we can best support you.