ISO/IEC 27006:2011
Information technology -- Security techniques -- Requirements for bodies providing audit and certification of information security management systems
This standard has been revised by ISO/IEC 27006:2015
ISO/IEC 27006:2011 specifies requirements and provides guidance for bodies providing audit and certification of an information security management system (ISMS), in addition to the requirements contained within ISO/IEC 17021 and ISO/IEC 27001. It is primarily intended to support the accreditation of certification bodies providing ISMS certification.
The requirements contained in ISO/IEC 27006:2011 need to be demonstrated in terms of competence and reliability by any body providing ISMS certification, and the guidance contained in ISO/IEC 27006:2011 provides additional interpretation of these requirements for any body providing ISMS certification.
General information
-
Status : WithdrawnPublication date : 2011-12
-
Edition : 2
-
Technical Committee:Information security, cybersecurity and privacy protection
-
- ICS :
-
Management systems
-
IT Security
Life cycle
A standard is reviewed every 5 years
Revisions / Corrigenda
-
Previously
ISO/IEC 27006:2007
-
Now withdrawn
ISO/IEC 27006:2011 -
Revised by
ISO/IEC 27006:2015
Got a question?
Check out our FAQs
Opening hours:
Monday to Friday - 09:00-12:00, 14:00-17:00 (UTC+1)
Keep up to date with ISO
Sign up to our newsletter for the latest news, views and product information