ISO/IEC 27001:2022 Information Security
Protect information assets with 93 controls.
- Standard code
- ISO/IEC 27001:2022
- Certification type
- Management system (ISO/IEC 17021-1)
- Initial audit duration (45 employees)
- 6.5 man-days
Manage IT services in line with ITIL.
ISO/IEC 20000-1 allows IT service providers to establish and operate a service management system. Service level agreements (SLA), incident and request management, change and release management and capacity planning are audited.
It is a decisive reference in enterprise customer contracts for managed service providers (MSP), software houses and data centre operators.
The service catalogue, SLA reports and customer satisfaction measurements are the main audit evidence; using ITIL practices is not mandatory but is a common approach.
| Certificate validity | 3 years |
|---|---|
| Focus | IT services |
| Alignment | ITIL practices |
Protect information assets with 93 controls.
Keep critical services running during a disruption.
Customer satisfaction and the process approach.