DIN EN ISO/IEC 27006-1
Information security, cybersecurity and privacy protection - Requirements for bodies providing audit and certification of information security management systems - Part 1: General (ISO/IEC 27006-1:2024); German version EN ISO/IEC 27006-1:2024
Informationssicherheit, Cybersicherheit und Datenschutz - Anforderungen an Stellen, die Informationssicherheitsmanagementsysteme auditieren und zertifizieren - Teil 1: Allgemeines (ISO/IEC 27006-1:2024); Deutsche Fassung EN ISO/IEC 27006-1:2024
Overview
DIN EN ISO/IEC 27006-1 specifies requirements and provides guidance for bodies providing audit and certification of an information security management system (ISMS), in addition to the requirements contained within ISO/IEC 17021-1 and ISO/IEC 27001. The requirements contained in this International Standard shall be demonstrated by any body that certifies ISMSs in terms of competence and reliability, and the guidance contained in this International Standard provides additional interpretation of these requirements for any body that certifies ISMSs. The responsible national standardization committee is Joint Working Committee NA 043-04-13 GA "DIN/DKE Gemeinschaftsgremium Cybersecurity" ("DIN/DKE Joint working committee Cybersecurity" at DIN Standards Committee Information Technology and IT Applications (NIA) and the German Commission for Electrical, Electronic and Information Technologies (DKE).
Document: references other documents
Responsible national committee
NA 043-04-13 GA - DIN/DKE Joint working committee Cybersecurity
Responsible european committee
CEN/CLC/JTC 13 - Cybersecurity and Data Protection
Responsible international committee
ISO/IEC JTC 1/SC 27/WG 1 - Information security management systems