Certification topic
Information security management
Information security management
ISO/IEC 27001 provides requirements for an information security management system. It helps organizations manage confidentiality, integrity and availability risks across information and supporting systems.
Risk-based controls
The organization defines its scope, assesses risks, chooses appropriate controls, documents its decisions, monitors incidents and performance, and improves the system through audits and management review.
Edition note
This page retains the 2013 label from the reference website. Any new certification activity should use the applicable edition and agreed transition arrangements.
Assessment areas
- Defined scope and risk assessment
- Control selection and evidence
- Incident management and review
To check an Astra-issued record, use its certificate number in the public register.
Verify Certificate ↗