ISO 27001/ISO 27002 - A guide to information security management systems

CHAPTER 1: ACCREDITED CERTIFICATION

While implementing an ISO 27001-compliant ISMS provides significant benefits, the greatest commercial benefit is achieved through accredited certification. Clients and customers will not simply accept your word that your ISMS is effective and that you take information security seriously – they will expect you to prove it.

Accredited certification is overseen by national accreditation bodies (that are in turn overseen by the International Accreditation Forum (IAF)). These bodies certify the competence of organisations that offer certification against national or international standards (usually called ‘certification bodies’), ensuring that their assessments are carried out in line with internationally recognised ...