From the course: ISO 27001:2022-Compliant Cybersecurity: Getting Started

Unlock the full course today

Join today to access over 22,700 courses taught by industry experts or purchase this course individually.

Begin the ISO 27001 compliance process: Introduction to Clauses 4 through 10

Begin the ISO 27001 compliance process: Introduction to Clauses 4 through 10

From the course: ISO 27001:2022-Compliant Cybersecurity: Getting Started

Start my 1-month free trial

Begin the ISO 27001 compliance process: Introduction to Clauses 4 through 10

- [Instructor] Now let's talk about beginning the ISO 27001 compliance process. And that starts with clauses four through 10 of the standard. It might seem strange that we're starting with clause four, but the first few clauses of the standard include the introduction and terms and definitions that aren't requirements for organizations to follow. So everybody usually starts at number four. Might be tempting to skip these clauses and go straight to Annex A, which are the controls most commonly associated with ISO 27001. That would be a mistake though, because clauses four through 10 are the foundation for complying with the ISO 27001 standard. They contain key compliance requirements, including the documented statement of applicability, scope of the ISMS, and the risk treatment plan. Without these, your organization is not compliant with ISO 27001, and will certainly fail a certification audit. Clauses four through 10…

Contents