ISO/IEC 27001:2022 Information Security Management System

The international standard used by organisations to protect information assets and manage information security risks.

Standard
ISO/IEC 27001
Edition
2022
Validity
3 years
Surveillance
Annual surveillance audit

What is ISO 27001?

ISO 27001 is the international standard that enables organisations to establish, operate, monitor and continually improve an information security management system (ISMS).

Certification Process

  1. 1 Application and scope definition
  2. 2 Gap analysis and documentation
  3. 3 System implementation and internal audit
  4. 4 Stage 1 and Stage 2 audit
  5. 5 Certificate issue
  6. 6 Annual surveillance and recertification

The certificate is issued by an accredited certification body; BESA manages the process from application to certificate.