Common ISO 27001 Gaps

January 2011

Companies considering getting certified to the international information security standard ISO 27001 often commission a gap audit to find out what they are missing at a high-level.

Many of these gap audits have common areas that are not yet in place, such as reviewing user access rights and security in supplier agreements. This article should help your organization if you are considering ISO 27001, or wish to ensure you comply with best practice.


Article: Common ISO 27001 Gaps - PDF 1.1Mb

This article was published in the January issue of the ISSA Journal.

ISSA Website