Search in ISMS Guides

Google
 

Sunday, July 6, 2008

ISMS Auditing Guideline [ Pdf File ]

Introduction
This guideline has been written by members of the ISO27k Implementers' Forum, an international online community of neatly 1,000 practitioners actively using the ISO/IEC 27000-family of Information Security Management System (ISMS) standards known colloquially as "ISO27k", and base at ISO27001security.com. Our primary aim is to contribute to the development of the new standard ISO/IEC 27007 by providing what we, as experienced ISMS implementers and IT/ISMS auditors, believe is worthwhile content. A secondary aim to provide a pragmatic and useful guideline for those involved in auditing ISMSs.

At the time of first writing this guideline (February-March 2008). ISO/IEC 27007 is currently at the first Working Draft stage ("ISO/IEC WD 27007") and has been circulated to ISO member bodies for study and comment by March 14 2008. Its working title is "Information Technology - Security techniques - Guidelines for information security management systems auditing".

The Proposed outline structure of ISO/IEC WD 27007 is presently as follows:
- Foreword and introduction
1. Scope
2. Normative references
3. Terms and definitions
4. Principles of auditing
5. Managing an audit programme
6. Audit activities
7. Competence and evaluation of auditors
- Bibliography

In the proposed structure, section 6 should presumably explain how to go about auditing an ISMS. The current working draft has headings for a guide to audit process but little content on the actual audit tests to be performed, although in section 6.3.1 it identifies a list of items that are required by ISO/IEC 27001 and says that "Auditors should check that all these documents exist and conform to the requirements in ISO/IEC 27001"2005". This is probably the most basic type of ISMS audit test: are the specified ISMS documents present? We feel that a generic ISMS audit checklist (often called an "Internal Controls Questionnaire" by IT auditors) would be a very useful addition to the standard and producing one was a key aim of this guideline - in fact we have produced two (see the appendices). We also aim to contribute content draft 27007 and hope to track its development through future revisions.

14 comments:

sesilia said...

This is really very informative blog. PTLLS Course is providing you an opportunity to be skilled individual.....

Goreng Ayam Marketing said...

AWESOME THE PROMOTION OF GIRL BEAUTIFUL SALES KLIK HERE SABUNG AYAM ONLINE

GOOD PRICE AND CHEAP
http://www.gorengayam.com 


PLEASE PRICE DIRECTLY

https://gorengayammarketing.wordpress.com/2018/08/01/4-ciri-jalu-pada-ayam-petarung-yang-mematikan/

Unknown said...

Great Content! Information Security Management It is an important topic!
Operating the same expertise and knowledge.
JLB has been Australia’s leader in management systems development and implementation for nearly 30 years.
Below we share our website to present our services.
http://www.jlb.com.au/business/management-system/main/info-security-management-systems/

Unknown said...


http://www.jlb.com.au/business/management-system/main/info-security-management-systems/

Kani Mozhi said...

Is this a paid style or did you modify it yourself? Either way keep up the pleasant quality writing, it is rare to see a great site such as this one these days.
Visitor Management System
Visitor Management System Dubai
Visitor Management Software Dubai
Visitor Management System UAE
Visitor Management Software
Visitor Management App

davidkaron said...

Very Nice. This blog is very useful to me. Now I have clarified my doubts On iso 27001 Certification. Thanks for sharing the information.

Mohamadsiraj said...

Thanks for your blog.ISO 27001 Certification in Oman

Mohamadsiraj said...

Thanks for your post.ISO 27001 Certification in Oman

Mohamadsiraj said...

Great Content! Information Security Management It is an important topic!. ISO 27000 Certification

SAUDI ARABIA said...

Excellent Blog. I really want to admire the quality of this post. I like the way of your presentation of ideas, views and valuable content. No doubt you are doing great work. ISO 27001 Certification in Oman

harrishvijay said...

Nice post, I bookmark your blog because I found very good information on your blog, Thanks for sharing- more information. ISO 27001 Certification in Oman

James Williams said...

Thank you for bringing to a halt my long search topic. I really benefited from your content

ISO 27001 Lead Auditor Training

Amith Sharma said...

Hey, nice site you have here! Keep up the excellent work!

ISO 27001 Certification Peru

jobinwason said...

Thanks for sharing.
formation iso 22301