12

Case Studies – Audit Planning, Reporting Nonconformities, and Audit Reporting

This chapter aims to provide practical insights into the audit planning process, nonconformity reporting, and audit reporting within the context of ISO 27001 implementation. It strives to offer real-world examples that you can relate to and learn from. The following are the case studies presented in this chapter:

Case study 1 – audit planning

Case study 2 – reporting Nonconformities (NCs)

Case study 3 – audit reporting

These case studies revolve around a hypothetical organization named Titan Consulting Inc., a rapidly growing technology consulting firm operating in the IT industry with 50 employees. A total of eight employees work in the infosec domain.

The first ...

Get Mastering Information Security Compliance Management now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.