ISO 27001 Audit: What Happens in Stage 1 and Stage 2

Описание: Stage 1 is a readiness check. The auditor reviews your documentation to decide whether the ISMS is designed properly: the context of your organization, the scope statement, the information security policy, the risk assessment, the risk treatment plan, and the Statement of Applicability. If there are major findings at this point you get time to remediate them before Stage 2. Stage 2 collects real evidence that the ISMS is not just existing on paper but working properly, through spot checks of systems, interviews with employees, and records such as logs and tickets.

Miriam Mindt is an information security and compliance consultant who takes companies from their first ISMS through to ISO 27001 certification and beyond. Here she explains what each stage looks at, what has to be finished before Stage 2 can start, and what a Stage 1 finding means for your timeline.

Full interview:    • ISO 27001 Audits Explained, from Stage 1 t...  
External audit preparation checklist: https://www.kertos.io/en/blog/how-to-...
ISO 27001 certification, the complete guide: https://www.kertos.io/en/blog/iso-270...

Part of the Ask a Compliance Expert series from Kertos, where the specialists who guide our customers through ISO 27001, SOC 2, GDPR, NIS2, and the EU AI Act answer the questions teams actually ask.

#ISO27001 #InformationSecurity #Compliance