Remove Continual Improvement Remove Gap Analysis Remove Technology
article thumbnail

ISO 27001 Certification Requirements & Standards

Reciprocity

Perform a Gap Analysis. A gap analysis gives you a high-level summary of what needs to be done to attain certification and allows you to examine and compare your organization’s current information security arrangements to the ISO 27001 standards. Third, create a project plan and a project risk register.

Audit 52
article thumbnail

ISO 27001 Requirements Checklist: Steps and Tips for Implementation

Reciprocity

The core of an ISMS is rooted in the people, processes, and technology through a governed risk management program. A complete list of controls for ISO 27001 is in Annex A of the standard, but not all of those controls are information technology-related. How Do You Perform a Gap Analysis?