Skip to content
Please enter a keyword to search

  • 11/30246891 DC : 0

    View superseded by
    Superseded A superseded Standard is one, which is fully replaced by another Standard, which is a new edition of the same Standard.
    View superseded by

    BS ISO/IEC 27006 - INFORMATION TECHNOLOGY - SECURITY TECHNIQUES - REQUIREMENTS FOR BODIES PROVIDING AUDIT AND CERTIFICATION OF INFORMATION SECURITY MANAGEMENT SYSTEMS

    Available format(s):  Hardcopy, PDF

    Superseded date:  31-01-2012

    Language(s):  English

    Published date: 

    Publisher:  British Standards Institution

    Add To Cart

    Table of Contents - (Show below) - (Hide below)

    Foreword
    Introduction
    1 Scope
    2 Normative references
    3 Terms and definitions
    4 Principles
    5 General requirements
    6 Structural requirements
    7 Resource requirements
    8 Information requirements
    9 Process requirements
    10 Management system requirements for certification
       bodies
    Annex A (informative) - Analysis of a client
            organization's complexity and sector-specific
            aspects
    Annex B (informative) - Example areas of auditor
            competence
    Annex C (informative) - Audit time
    Annex D (informative) - Guidance for review of
            implemented ISO/IEC 27001:2005, Annex A
            controls

    General Product Information - (Show below) - (Hide below)

    Comment Closes On
    Committee IST/33
    Document Type Draft
    Publisher British Standards Institution
    Status Superseded
    Superseded By

    Standards Referencing This Book - (Show below) - (Hide below)

    ISO 19011:2011 Guidelines for auditing management systems
    ISO/IEC 27001:2013 Information technology — Security techniques — Information security management systems — Requirements
    ISO/IEC 17021:2011 Conformity assessment Requirements for bodies providing audit and certification of management systems
    View more information

    • Access your standards online with a subscription

      Features

      • Simple online access to standards, technical information and regulations
      • Critical updates of standards and customisable alerts and notifications
      • Multi - user online standards collection: secure, flexibile and cost effective