ISO/IEC 27007:2020
Managing an audit programme (clause 5) – ISO/IEC 27007:2020

ISO/IEC 27007:2020 5.4.2: Competence of individual(s) managing audit programme

ISO 19011:2018, 5.4.2 is followed with nothing added: those managing the ISMS audit programme have the competence to manage it and its risks, opportunities and issues, with knowledge of audit principles, methods and processes, of ISO/IEC 27001 and the other standards and references the programme uses, of the auditee and its context, of the applicable statutory, regulatory and other requirements, and of information security and its risk management where relevant to the programme.

Maintained by Gerard BlokdykControl text last updated

Other controls in Managing an audit programme (clause 5) – ISO/IEC 27007:2020

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.