šŸ”„šŸ”„ Donā€™t Miss Out on Our End of Autumn Sale. If you have any questions, feel free to click the bottom right corner to contact our customer service..

Concat us[email protected]
Shopping Cart

No products in the cart.

šŸ”
BS EN ISO/IEC 27006:2020 2021

BS EN ISO/IEC 27006:2020 2021

$189.07

Information technology. Security techniques. Requirements for bodies providing audit and certification of information security management systems

Published By Publication Date Number of Pages
BSI 2021 48
PDF Format Searchable Printable Preview Now
Guaranteed Safe Checkout
Category:

If you have any questions, feel free to reach out to our online customer service team by clicking on the bottom right corner. Weā€™re here to assist you 24/7.
Email:[email protected]

This International Standard specifies requirements and provides guidance for bodies providing audit and certification of an information security management system (ISMS), in addition to the requirements contained within ISO/IEC 17021ā€‘1 and ISO/IEC 27001 . It is primarily intended to support the accreditation of certification bodies providing ISMS certification.

The requirements contained in this International Standard need to be demonstrated in terms of competence and reliability by any body providing ISMS certification, and the guidance contained in this International Standard provides additional interpretation of these requirements for any body providing ISMS certification.

NOTE This International Standard can be used as a criteria document for accreditation, peer assessment or other audit processes.

PDF Catalog

PDF Pages PDF Title
2 National foreword
6 European foreword
9 Foreword
10 Introduction
11 1 Scope
2 Normative references
3 Terms and definitions
4 Principles
12 5 General requirements
5.1 Legal and contractual matters
5.2 Management of impartiality
5.2.1 IS 5.2 Conflicts of interest
5.3 Liability and financing
6 Structural requirements
7 Resource requirements
7.1 Competence of personnel
13 7.1.1 IS 7.1.1 General considerations
7.1.2 IS 7.1.2 Determination of Competence Criteria
16 7.2 Personnel involved in the certification activities
7.2.1 IS 7.2 Demonstration of auditor knowledge and experience
17 7.3 Use of individual external auditors and external technical experts
7.3.1 IS 7.3 Using external auditors or external technical experts as part of the audit team
7.4 Personnel records
7.5 Outsourcing
18 8 Information requirements
8.1 Public information
8.2 Certification documents
8.2.1 IS 8.2 ISMS Certification documents
8.3 Reference to certification and use of marks
8.4 Confidentiality
8.4.1 IS 8.4 Access to organizational records
8.5 Information exchange between a certification body and its clients
9 Process requirements
9.1 Pre-certification activities
9.1.1 Application
19 9.1.2 Application review
9.1.3 Audit programme
20 9.1.4 Determining audit time
9.1.5 Multi-site sampling
21 9.1.6 Multiple management systems
9.2 Planning audits
9.2.1 Determining audit objectives, scope and criteria
22 9.2.2 Audit team selection and assignments
9.2.3 Audit plan
23 9.3 Initial certification
9.3.1 IS 9.3.1 Initial certification audit
24 9.4 Conducting audits
9.4.1 IS 9.4 General
9.4.2 IS 9.4 Specific elements of the ISMS audit
9.4.3 IS 9.4 Audit report
25 9.5 Certification decision
9.5.1 IS 9.5 Certification decision
9.6 Maintaining certification
9.6.1 General
9.6.2 Surveillance activities
26 9.6.3 Re-certification
27 9.6.4 Special audits
9.6.5 Suspending, withdrawing or reducing the scope of certification
9.7 Appeals
9.8 Complaints
9.8.1 IS 9.8 Complaints
9.9 Client records
10 Management system requirements for certification bodies
10.1 Options
10.1.1 IS 10.1 ISMS implementation
10.2 Option A: General management system requirements
10.3 Option B: Management system requirements in accordance with ISO 9001
28 Annex A (informative) Knowledge and skills for ISMS auditing and certification
30 Annex B (normative) Audit time
35 Annex C (informative) Methods for audit time calculations
39 Annex D (informative) Guidance for review of implemented ISO/IEC 27001:2013, Annex A controls
47 Bibliography

Related products

BS EN ISO/IEC 27006:2020 2021
$189.07