Scope and context
Definition of scope, interested parties, and security requirements.
Standard
ISO/IEC 27001
ISO/IEC 27001 structures information security into an auditable and continually improved management system.
Key points
Risk treatment
Risk assessment, treatment plan, and statement of applicability.
Improvement
Internal audits, management review, and corrective actions.
A specific need on this topic?
The firm scopes every engagement around your regulatory and operational context.