BS EN ISO/IEC 27006-1:2024 Information security, cybersecurity and privacy protection. Requirements for bodies providing audit and certification of information security management systems - General
1 Scope
This document specifies requirements and provides guidance for bodies providing audit
and certification of an information security management system (ISMS), in addition to the requirements contained within ISO/IEC 17021‑1.
The requirements contained in this document are demonstrated in terms of competence
and reliability by bodies providing ISMS certification. The guidance contained in
this document provides additional interpretation of these requirements for bodies
providing ISMS certification.
NOTE This document can be used as a criteria document for accreditation, peer assessment
or other audit processes.
BS EN ISO/IEC 27006-1:2024 history
2024BS EN ISO/IEC 27006-1:2024 Information security, cybersecurity and privacy protection. Requirements for bodies providing audit and certification of information security management systems - General