ISO 27001

ISO 27001 is the certifiable standard; ISO 27002 is the implementation guide. Learn which document your auditor checks, which one to buy first, and how to use them together.

ISO 27001 risk assessment methodology, 7-step process, scoring matrix, scenario examples, and documentation auditors actually request.

ISO 27001 certification explained: who issues certificates, the 3-year cycle, what a valid certificate shows, and how to verify one on IAF CertSearch.

ISO 27001 Statement of Applicability explained: what to include, all 93 Annex A controls, justification examples, and a free SoA template.

What ISO 27001 Clause 9.2 requires for internal audits: program setup, auditor independence, a 40-point checklist, finding types, and the report.

All 93 ISO 27001:2022 Annex A controls across 4 themes: Organizational (37), People (8), Physical (14), Technological (34). Control numbers, implementation notes, framework mapping.

How the ISO 27001 two-stage audit works: Stage 1 documentation review, Stage 2 implementation, surveillance, nonconformities and recertification.

Step-by-step ISO 27001 implementation guide covering the 10 phases from gap analysis to certification audit, with timelines, costs, and common mistakes.

ISO 27001 certification cost breakdown for 2026: US and UK pricing, auditor fees, consultant costs, platform pricing, and total cost by company size.