ISO/IEC 27006:2007
Withdrawn
View Superseded by
Information technology — Security techniques — Requirements for bodies providing audit and certification of information security management systems
Hardcopy , PDF
English, Russian
02-13-2007
04-09-2025
ISO/IEC 27006:2007 specifies requirements and provides guidance for bodies providing audit and certification of an information security management system (ISMS), in addition to the requirements contained within ISO/IEC 17021 and ISO/IEC 27001. It is primarily intended to support the accreditation of certification bodies providing ISMS certification.
The requirements contained in ISO/IEC 27006:2007 need to be demonstrated in terms of competence and reliability by any body providing ISMS certification, and the guidance contained in ISO/IEC 27006:2007 provides additional interpretation of these requirements for any body providing ISMS certification.
| Committee |
ISO/IEC JTC 1/SC 27
|
| DocumentType |
Standard
|
| Pages |
36
|
| PublisherName |
International Organization for Standardization
|
| Status |
Withdrawn
|
| SupersededBy |
| Standards | Relationship |
| BS ISO/IEC 27006:2007 | Equivalent |
| JIS Q 27006:2008 | Identical |
| BS ISO/IEC 27006:2007 | Identical |