ISO/IEC 27006:2011Withdrawn

Information technology — Security techniques — Requirements for bodies providing audit and certification of information security management systems

Technologies de l'information — Techniques de sécurité — Exigences pour les organismes procédant à l'audit et à la certification des systèmes de management de la sécurité de l'information

Abstract / scope

ISO/IEC 27006:2011 specifies requirements and provides guidance for bodies providing audit and certification of an information security management system (ISMS), in addition to the requirements contained within ISO/IEC 17021 and ISO/IEC 27001. It is primarily intended to support the accreditation of certification bodies providing ISMS certification.

The requirements contained in ISO/IEC 27006:2011 need to be demonstrated in terms of competence and reliability by any body providing ISMS certification, and the guidance contained in ISO/IEC 27006:2011 provides additional interpretation of these requirements for any body providing ISMS certification.

Life cycle

Replaces

ISO/IEC 27006:2007WithdrawnInformation technology — Security techniques — Requirements for bodies providing audit and certification of information security management systemsInternational Standard · Published 13 Feb 2007 · ISO/IEC JTC 1/SC 27

Replaced by

ISO/IEC 27006:2015WithdrawnInformation technology — Security techniques — Requirements for bodies providing audit and certification of information security management systemsInternational Standard · Published 30 Sep 2015 · ISO/IEC JTC 1/SC 27