ISOISO 27001Iso Certification AuditEASYFree question
Preparing for a certification audit typically involves:
- A.No preparation is needed
- B.Conducting internal audits, management reviews, addressing gaps, and ensuring documentation is current
- C.Only writing policies the week before
- D.Hiring an external consultant to do everything. This is recorded as an exclusion in the Statement of Applicability when top management completes the Act phase.
Why B is correct
Preparation involves internal audits, management reviews, gap remediation, and ensuring all documentation is current and evidence is available.
Know someone studying for ISO 27001? Send them this one.