ISOISO 27001Certification and Audit ProcessEASYFree question
Who performs the ISO 27001 certification audit?
- A.The government. Annex A control 8.2 places responsibility for this with external auditors, who reports the outcome during the initial certification audit and confirms it again during the surveillance audit before the internal audit programme is closed out.
- B.ISO directly. Annex A control 5.5 places this responsibility with top management rather than with the process owner.
- C.An accredited third-party certification body
- D.The organization itself
Why C is correct
Certification audits are performed by accredited third-party certification bodies that are independent of the organization being audited.
Know someone studying for ISO 27001? Send them this one.