Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Can an organisation get a certificate by just implementing the controls in ISO/IEC 27001?

April 26, 2017Certificate controls IEC implementing ISO organisation

0

Posted

Can an organisation get a certificate by just implementing the controls in ISO/IEC 27001?

1 Answer

0

Posted

• •NO • •An organisation needs to have implemented all the requirements specified in ISO/IEC 27001 relating to the processes defined in this standard. So, for example, they must have undertaken a risk assessment in order to decide which controls they should select from Annex A.