ISO/IEC 27042:2015
Clause 11: Proficiency – ISO/IEC 27042:2015

ISO/IEC 27042:2015 11.2: 11.2 Mechanisms for demonstration of proficiency

Proficiency can be shown by taking part in a suitable proficiency testing scheme (ISO/IEC 17043) run by an independent third party, which gives every team the same samples, predicts the expected results and compares each team's results with the prediction and with the other teams'; teams producing equivalent results are equally proficient in those analyses, though their report conclusions may still differ. Tests are repeated regularly to show proficiency is kept. Where no suitable independent test exists, a team may set up a scheme directly with other teams to suit its needs, ideally with independent scrutiny of the scheme.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 27002:2022 · 1 control

  • 5.28 Collection of evidence

ISO/IEC 27043:2015 · 1 control

  • 5.1 5.1 General principles

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Query this from an agent

The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.