EN ISO/IEC 27006-1:2024

Information security, cybersecurity and privacy protection - Requirements for bodies providing audit and certification of information security management systems - Part 1: General (ISO/IEC 27006-1:2024)

General information

60.60 Standard published   Mar 13, 2024

CEN/CENELEC

CEN/CLC/JTC 13 Cybersecurity and Data Protection

European Norm

03.120.20   Product and company certification. Conformity assessment | 35.030   IT Security

Scope

This document specifies requirements and provides guidance for bodies providing audit and certification of an information security management system (ISMS), in addition to the requirements contained within ISO/IEC 17021-1.
The requirements contained in this document are demonstrated in terms of competence and reliability by bodies providing ISMS certification. The guidance contained in this document provides additional interpretation of these requirements for bodies providing ISMS certification.
NOTE       This document can be used as a criteria document for accreditation, peer assessment or other audit processes.

Life cycle

PREVIOUSLY

WITHDRAWN
EN ISO/IEC 27006:2020

NOW

PUBLISHED
EN ISO/IEC 27006-1:2024
60.60 Standard published
Mar 13, 2024