ISO 27001 Consulting and ISMS Design

Scope, risk methodology, Statement of Applicability, and the Annex A controls behind them. We specify the management system and review how it operates, so it survives Stage 2 and the surveillance audits that follow. On one program, nonconformities fell 60 percent between cycles.