Remove Accreditation Remove Activation Remove All-Hazards Remove Gap Analysis
article thumbnail

ISO 27001 Certification Requirements & Standards

Reciprocity

Rather than implementing controls as a checkbox activity, risk-driven organizations proactively choose controls that best mitigate their risks. Perform a Gap Analysis. The SoA lists all of the controls described in ISO 27001, specifies whether each control has been implemented, and explains why it was included or removed.

Audit 52