Skip to content
Please enter a keyword to search

  • BS ISO/IEC 27006:2015

    Withdrawn A Withdrawn Standard is one, which is removed from sale, and its unique number can no longer be used. The Standard can be withdrawn and not replaced, or it can be withdrawn and replaced by a Standard with a different number.

    Information technology. Security techniques. Requirements for bodies providing audit and certification of information security management systems

    Available format(s):  Hardcopy, PDF

    Withdrawn date:  09-04-2020

    Language(s):  English

    Published date:  31-10-2015

    Publisher:  British Standards Institution

    Add To Cart

    Table of Contents - (Show below) - (Hide below)

    Foreword
    Introduction
    1 Scope
    2 Normative references
    3 Terms and definitions
    4 Principles
    5 General requirements
    6 Structural requirements
    7 Resource requirements
    8 Information requirements
    9 Process requirements
    10 Management system requirements for certification
       bodies
    Annex A (informative) - Knowledge and skills for ISMS
            auditing and certification
    Annex B (normative) - Audit time
    Annex C (informative) - Methods for audit time calculations
    Annex D (informative) - Guidance for review of implemented
            ISO/IEC 27001:2013, Annex A controls
    Bibliography

    Abstract - (Show below) - (Hide below)

    Defines requirements and provides guidance for bodies providing audit and certification of an information security management system (ISMS), in addition to the requirements contained within ISO/IEC 17021-1 and ISO/IEC 27001.

    General Product Information - (Show below) - (Hide below)

    Committee IST/33/1
    Development Note Supersedes 06/30148917 DC. (03/2007) Supersedes 11/30246891 DC. (02/2012) Supersedes 15/30266416 DC. (10/2015) Also available as part of BS KIT 270. (07/2016)
    Document Type Standard
    Publisher British Standards Institution
    Status Withdrawn
    Supersedes

    Standards Referencing This Book - (Show below) - (Hide below)

    ISO 19011:2011 Guidelines for auditing management systems
    ISO/IEC 27001:2013 Information technology — Security techniques — Information security management systems — Requirements
    ISO 9001:2015 Quality management systems — Requirements
    ISO/IEC 27007:2017 Information technology Security techniques Guidelines for information security management systems auditing
    ISO/IEC 27000:2016 Information technology Security techniques Information security management systems Overview and vocabulary
    ISO/IEC 17021-1:2015 Conformity assessment Requirements for bodies providing audit and certification of management systems Part 1: Requirements
    View more information

    • Access your standards online with a subscription

      Features

      • Simple online access to standards, technical information and regulations
      • Critical updates of standards and customisable alerts and notifications
      • Multi - user online standards collection: secure, flexibile and cost effective