OtherInternational
ISO/IEC 27007:2020
ISO/IEC 27007 provides guidance on managing an ISMS audit programme, conducting audits, and evaluating the competence of ISMS auditors. It supplements ISO 19011 with ISMS-specific auditing guidance for both internal and external audits.
Domains
Annex A: ISMS Auditing Practice Guidance
Clause 7: Competence and Evaluation of ISMS Auditors
Clause 6: Conducting an ISMS Audit
Clause 5: Managing an ISMS Audit Programme
Clause 4: Principles of Auditing
Compare ISO/IEC 27007:2020
ISO/IEC 27007:2020 by Industry
ISO/IEC 27007:2020 by Role
Frequently Asked Questions
What is ISO/IEC 27007:2020?
ISO/IEC 27007 provides guidance on managing an ISMS audit programme, conducting audits, and evaluating the competence of ISMS auditors. It supplements ISO 19011 with ISMS-specific auditing guidance for both internal and external audits.
How many controls does ISO/IEC 27007:2020 have?
ISO/IEC 27007:2020 contains 19 controls organized across 5 domains.
Where does ISO/IEC 27007:2020 apply?
ISO/IEC 27007:2020 is applicable in International. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
What frameworks does ISO/IEC 27007:2020 map to?
ISO/IEC 27007:2020 has control-to-control mappings with 328 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.
How do I get started with ISO/IEC 27007:2020 compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.
How ready are you for ISO/IEC 27007:2020?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.