IEC 27001
What is IEC 27001?
The International Electrotechnical Commission's numbering for ISO 27001, the international standard for information security management systems.
Terms that appear alongside iec 27001
Each of these is named in at least one of the same controls as iec 27001. The number is how many controls name both.
- nist 28 shared controls
- information security 22 shared controls
- audit 21 shared controls
- cybersecurity 16 shared controls
- iso 27001 14 shared controls
- compliance 13 shared controls
- management system 13 shared controls
- policy 12 shared controls
Frameworks that govern iec 27001
What the standards actually require on iec 27001
Requirements naming iec 27001 across 6 standards, quoted from the control text.
The auditor examines whether the resources required to set up, run, maintain and keep improving the ISMS were determined and provided, through budgets, staffing, tooling and the resource discussions in management review.
iso-iec-27007-2020::A:7.1 · Annex A: auditing ISO/IEC 27001:2013, 7.1 Resources →Under ISO/IEC 27001:2013, 9.1 the organization has to evaluate how its information security performs and how effective its ISMS is (the measure types of clause 7 serve that) and to determine six things: what is to be monitored and measured, the information sec...
iso-iec-27004-2016::5.2 · Fulfilling the ISO/IEC 27001 requirements →Input: all necessary controls (8.3). Action: compare them with the controls in 27001:2022 Annex A. Trigger: formulating treatment plans makes finding any missing controls necessary. Output: all controls applicable to treatment.
iso-27005-2022::8.4 · Comparing the controls determined with those in ISO/IEC 27001:2022, Annex A →The CCM assessment follows the ISO/IEC 27001:2022 cycle. A provider certifying to both for the first time has an initial assessment covering both, then surveillance visits that together cover the full range of ISO/IEC 27001 and the CCM over three years, and a...
csa-star-security-trust-assurance-and-risk::L2-CYCLE · Follow the ISO/IEC 27001 audit cycle for the CCM assessment, surveillance and recertification →Category A must hold independent certification against iRAP (the ISM) or ISO/IEC 27001 (the questionnaire names the 2022 edition); categories B and C may choose independent certification, and it is optional but recommended for category D.
ato-digital-service-provider-dsp-operational-security-framework::CERT.IND · Independent certification (iRAP or ISO/IEC 27001) where the category requires it →Applying ISO/IEC 27001:2013 to a community needs interpretation in three places. The organization that establishes, implements, maintains and improves the ISMS (27001, 4.4) is the community itself, whose members are themselves organizations (Figure 1).
iso-iec-27010-2015::4.6 · Conformity: interpreting ISO/IEC 27001:2013 for a community →Questions people ask about iec 27001
What is IEC 27001?
Why is IEC 27001 important for compliance?
Which compliance frameworks address IEC 27001?
Where can I learn more about IEC 27001?
See how IEC 27001 applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.