ISO/IEC 27007:2020
ISO/IEC 27007 provides guidance on managing an ISMS audit programme, conducting audits, and evaluating the competence of ISMS auditors. It supplements ISO 19011 with ISMS-specific auditing guidance for both internal and external audits.
Domains
Annex A: ISMS Auditing Practice Guidance
Clause 7: Competence and Evaluation of ISMS Auditors
Clause 6: Conducting an ISMS Audit
Clause 5: Managing an ISMS Audit Programme
Clause 4: Principles of Auditing
Frequently Asked Questions
Map ISO/IEC 27007:2020 to any other framework
Use our AI-powered compliance platform to find control overlaps, gaps, and build remediation plans in seconds.