Back

ISO/IEC 27006-1:2024

Information security, cybersecurity and privacy protection — Requirements for bodies providing audit and certification of information security management systems — Part 1: General

General information

Valid from 01.03.2024
ICS Groups
03.120.20 Product and company certification. Conformity assessment 35.030 IT Security
Directives or regulations
None

Standard history

Status
Date
Type
Name
01.03.2024
Main
ISO/IEC 27006-1:2024
27.03.2020
Amendment
ISO/IEC 27006:2015/Amd 1:2020
30.09.2015
Main
ISO/IEC 27006:2015
This document specifies requirements and provides guidance for bodies providing audit and certification of an information security management system (ISMS), in addition to the requirements contained within ISO/IEC 17021-1.
The requirements contained in this document are demonstrated in terms of competence and reliability by bodies providing ISMS certification. The guidance contained in this document provides additional interpretation of these requirements for bodies providing ISMS certification.
NOTE       This document can be used as a criteria document for accreditation, peer assessment or other audit processes.

Required fields are indicated with *

*
*
*
PDF
226.82 € incl tax
Paper
226.82 € incl tax
Standard monitoring
English (PDF 2 MB)

Related products

Main

EVS-EN ISO/IEC 27001:2017

Information technology - Security techniques - Information security management systems - Requirements (ISO/IEC 27001:2013 including Cor 1:2014 and Cor 2:2015)
Withdrawn from 15.08.2023
Main

EVS-EN ISO 19011:2018

Guidelines for auditing management systems (ISO 19011:2018)
Newest version Valid from 16.08.2018
Main + corrigendum

EVS-EN ISO/IEC 17025:2017

General requirements for the competence of testing and calibration laboratories (ISO/IEC 17025:2017)
Newest version Valid from 18.12.2017
Main

EVS-EN ISO/IEC 27001:2023

Information security, cybersecurity and privacy protection - Information security management systems - Requirements (ISO/IEC 27001:2022)
Newest version Valid from 15.08.2023

Customers who bought this item also bought

Main

EVS-EN 14877:2013

Synthetic surfaces for outdoor sports areas - Specification
Newest version Valid from 14.11.2013
Main

EVS-ISO/IEC 27033-1:2024

Information technology - Security techniques - Network security - Part 1: Overview and concepts (ISO/IEC 27033-1:2015, identical)
Newest version Valid from 15.03.2024

Standards designation

EVS Estonian standard
EN European standard (published by an CEN or CENELEC)
EN ISO International standard adopted as an European standard
ISO International Organization for Standardization’s standard
IEC International Electrotechnical Commission’s standard
HD CENELEC’s harmonisation document
   
EVS-EN European standard implemented in Estonia
EVS-EN ISO International standard adopted in Europe and implemented in Estonia
EVS-EN ISO/IEC International standard/International electrotechnical standard adopted in Europe and implemented in Estonia
EVS-IEC International electrotechnical standard implemented in Estonia
EVS-ISO International standard implemented in Estonia
   
A, AMD amedment
+A a full standard plus the amendment
/A only amendment
COR, AC corrigendum
+COR a full standard plus the corrigendum
NA national annex
+NA a full standard plus the national annex
/NA only national annex
TS technical specification
TR technical report
CWA agreement, developed by a CEN or CENELEC
prEVS-EN (etc) draft standard
   
et the standard is in Estonian only
en the standard is in English only
et-en the standard is in Parallel text Estonian-English