This duo of standard is for internal and external auditors undertaking an audit of an information security management system (ISMS). They provide essential guidance on a best practice approach to ISMS auditors. This duo of standards includes ISO/IEC 27007:2011 and ISO/IEC TR 27008:2011, the two essential standards for ISMS internal and external auditors. If you are undertaking an audit and want best practice guidance, this is the duo of standards you need.
ISO/IEC 27007:2011 (Download) - provides guidance on conducting information security management system (ISMS) audits and managing ISMS audit programs.
ISO/IEC TR 27008:2011 (Download) - provides guidance on reviewing the implementation and operation information security controls within an organization.
Format: Electronic Download (2 x Zipped PDFS) Licensing: Licensing Terms: Purchase and Use of this Product is Subject to this EULA. Availability: Immediate Download Buy this essential duo of standards today!
To write review for this product Click here