ISO/IEC 27007:2020
Conducting an audit (clause 6) – ISO/IEC 27007:2020

ISO/IEC 27007:2020 6.3.1: Performing review of documented information

ISO 19011:2018, 6.3.1 is followed with nothing added: the auditee's ISMS documented information (system documents, records, previous audit reports) is reviewed to understand its operations, prepare the audit and work documents, and judge the extent of documentation for conformity and for deficiencies, omissions or conflicts, taking the audit's scope and complexity into account.

Maintained by Gerard BlokdykControl text last updated

Other controls in Conducting an audit (clause 6) – ISO/IEC 27007:2020

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.