ISO 27001

ISO 27001 is the international standard for an Information Security Management System (ISMS). Certification covers a defined set of information assets, systems, and locations — not a blanket approval of all software or products the organisation sells.

The scope must name systems, sites, and exclusions. Auditors review the Statement of Applicability (SoA), risk assessment and treatment, selected Annex A controls, and how incidents and access are managed.

The SoA is reviewed at each visit. Start a file from Contact; check issued certificates on Search.