一招教会你执行ISO27001(英文).pptVIP

* * * * * * * * Initial audit and certification Stage 1 audit (IS ) Document review Document review to be completed prior to Stage 2 In a written report Further types of information and records may be required for detailed examination during Stage 2 Initial audit and certification Stage 2 audit (IS ) To confirm that organization adheres to its own policies, objectives and procedures; To confirm that the ISMS conforms to all the requirements of the normative ISMS standard ISO/IEC 27001 and is achieving the organization’s policy objectives Focus of Stage 2 audit a) assessment of information sec