ISO/IEC 27001
Also called: ISO 27001 · ISO27001
The best-known international standard for information security management systems (ISMS). It sets requirements for establishing, implementing, maintaining and continually improving how an organisation manages security risk, and third-party certification bodies audit and certify against it. A certificate shows the management system passed an audit, not that systems are free of vulnerabilities; when assessing a supplier, check that the certified scope covers the systems and teams serving you.
Further reading: www.iso.org
From the Security Academy
ISO/IEC 27001:2022 and CNS 27001: Implementation, Certification Timeline and Pre-Audit Self-Check
Asked to get ISO 27001? What a certificate scope covers, what changed in 2022, which Cyber Security Act levels need certification, and the 3-year audit cycle.
14 min read ·
When a Customer Asks for a "Security Certification": SOC 2, ISO 27001 and Security Questionnaires
SOC 2 attestation reports vs ISO 27001 certification, what a customer really needs, cloud shared-responsibility traps, and reusable questionnaire answers.
13 min read ·
Advisories that mention this term
No advisories mention this term yet.