Organisations are required to conduct audits to provide evidence of conformance to:
- The organisation’s own requirements for its ISMS
- The mandatory clauses of the standard (clauses 4-10)
- ISO 27001 Annex A (and other) controls which are included within the scope of the ISMS
Audits can also be aligned to processes, many of which will be been developed to meet the objectives of your ISMS and will complement the implementation of the clauses and controls of the Standard.
related BLog
No items found.
"
Whenever we have asked our QSA and account manager whether additional work is required outside of the annual cycle, there has never been a hard sell of any of URM’s services, and instead offer advice based on our compliance requirements and business needs.
CISO at University of Surrey
contact US
Let us help you
Let us help you in your compliance journey by completing the form and letting us know how we can best support you.