| PDF Pages<\/th>\n | PDF Title<\/th>\n<\/tr>\n | ||||||
|---|---|---|---|---|---|---|---|
| 2<\/td>\n | undefined <\/td>\n<\/tr>\n | ||||||
| 4<\/td>\n | European foreword Endorsement notice <\/td>\n<\/tr>\n | ||||||
| 7<\/td>\n | Foreword <\/td>\n<\/tr>\n | ||||||
| 8<\/td>\n | Introduction <\/td>\n<\/tr>\n | ||||||
| 9<\/td>\n | 1 Scope 2 Normative references 3 Terms and definitions 4 Principles of auditing 5 Managing an audit programme 5.1 General 5.2 Establishing audit programme objectives <\/td>\n<\/tr>\n | ||||||
| 10<\/td>\n | 5.3 Determining and evaluating audit programme risks and opportunities 5.4 Establishing audit programme 5.4.1 Roles and responsibilities of the individual(s) managing audit programme 5.4.2 Competence of individual(s) managing audit programme 5.4.3 Establishing extent of the audit programme <\/td>\n<\/tr>\n | ||||||
| 11<\/td>\n | 5.4.4 Determining audit programme resources 5.5 Implementing audit programme 5.5.1 General 5.5.2 Defining the objectives, scope and criteria for an individual audit <\/td>\n<\/tr>\n | ||||||
| 12<\/td>\n | 5.5.3 Selecting and determining audit methods 5.5.4 Selecting audit team members 5.5.5 Assigning responsibility for an individual audit to the audit team leader 5.5.6 Managing audit programme results 5.5.7 Managing and maintaining audit programme records <\/td>\n<\/tr>\n | ||||||
| 13<\/td>\n | 5.6 Monitoring audit programme 5.7 Reviewing and improving audit programme 6 Conducting an audit 6.1 General 6.2 Initiating audit 6.2.1 General 6.2.2 Establishing contact with auditee 6.2.3 Determining feasibility of audit 6.3 Preparing audit activities 6.3.1 Performing review of documented information 6.3.2 Audit planning <\/td>\n<\/tr>\n | ||||||
| 14<\/td>\n | 6.3.3 Assigning work to audit team 6.3.4 Preparing documented information for audit 6.4 Conducting audit activities 6.4.1 General 6.4.2 Assigning roles and responsibilities of guides and observers 6.4.3 Conducting opening meeting 6.4.4 Communicating during audit 6.4.5 Audit information availability and access 6.4.6 Reviewing document information while conducting audit <\/td>\n<\/tr>\n | ||||||
| 15<\/td>\n | 6.4.7 Collecting and verifying information 6.4.8 Generating audit findings 6.4.9 Determining audit conclusions 6.4.10 Conducting closing meeting 6.5 Preparing and distributing audit report 6.5.1 Preparing audit report 6.5.2 Distributing audit report 6.6 Completing audit 6.7 Conducting audit follow-up <\/td>\n<\/tr>\n | ||||||
| 16<\/td>\n | 7 Competence and evaluation of auditors 7.1 General 7.2 Determining auditor competence 7.2.1 General 7.2.2 Personal behaviour 7.2.3 Knowledge and skills <\/td>\n<\/tr>\n | ||||||
| 17<\/td>\n | 7.2.4 Achieving auditor competence 7.2.5 Achieving audit team leader competence 7.3 Establishing auditor evaluation criteria 7.4 Selecting appropriate auditor evaluation method 7.5 Conducting auditor evaluation 7.6 Maintaining and improving auditor competence <\/td>\n<\/tr>\n | ||||||
| 18<\/td>\n | Annex A (informative) Guidance for ISMS auditing practice <\/td>\n<\/tr>\n | ||||||
| 47<\/td>\n | Bibliography <\/td>\n<\/tr>\n<\/table>\n","protected":false},"excerpt":{"rendered":" Information security, cybersecurity and privacy protection. Guidelines for information security management systems auditing<\/b><\/p>\n |