CHAPTER 1: WHAT ARE ASSESSMENTS?

Assessments are a way of finding out whether an organisation’s internal management policies and processes match up to the requirements laid down in certain management standards. It is the same as an audit. If an assessment finds the specification is being met then the organisation being assessed can be certificated. This means that the organisation is awarded a certificate to demonstrate compliance with the requirements of the standard against which the assessment was conducted.

Each standard addresses one discipline, and has a document defining the specification that has to be met for certification to be awarded. Each specification describes the requirements that must be satisfied in order to provide a sound ...

Get ISO27001 Assessments Without Tears now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.