Implementing an Information Security Management System: Security Management Based on ISO 27001 Guidelines

© Abhishek Chopra, Mukund Chaudhary 2020

A. Chopra, M. ChaudharyImplementing an Information Security Management Systemhttps://doi.org/10.1007/978-1-4842-5413-4_9

9. External Audit

Abhishek Chopra¹  and Mukund Chaudhary²

(1)

Faridabad, Haryana, India

(2)

Noida, India

 

"Uncontrolled access to data, with no audit trail of activity and no oversight, would be going too far. This applies to both commercial and government use of data about people.”

—John Poindexter

This chapter covers external audits, which is the last stage of your ISO 27001 implementation. This chapter also explains the external audit requirements, including how to prepare for an audit, the best practices to manage the audit, and closing an audit. The chapter covers the following topics: ...