ISO 27001

ISO 27001, also searched as ISO27001, is the requirement a buyer uses to test whether you can evidence control of information security.

The question often arrives as a supplier questionnaire or as a selection requirement. What counts is whether measures, risks and evidence belong together.

I turn ISO 27001 into a way of working an external audit can follow, together with privacy where data protection law touches the same facts.

I do not promise the certificate. The certification body issues that.

Request a conversation

Related

• Privacy

  Make privacy and the GDPR demonstrable for a buyer. This is not reserved legal advice.

• Risk management

  Risk management that names which gate is shut and which requirement you can still meet.

• ISO 9001

  Prepare for ISO 9001 (ISO9001) when a buyer requires quality management. The certification body issues the certificate.