Our own servers in Europe · GDPR · Support in your language
ES EN CA
Let's talk

Learning path

ISO 27001 — Information security

The seven auditable clauses of the information security standard, with risk analysis and the statement of applicability explained clause by clause.

7 modules ~30 min total Content reviewed on

  1. 1 Context of the organization How to identify your information assets and your system's interested parties. Clause 4
  2. 2 Leadership How to show management commitment to information security. Clause 5
  3. 3 Planning How to analyze risk and build the statement of applicability. Clause 6
  4. 4 Support How to manage security awareness and ISMS documentation. Clause 7
  5. 5 Operation How to apply operational controls and manage security incidents. Clause 8
  6. 6 Performance evaluation How to measure control effectiveness and audit the ISMS. Clause 9
  7. 7 Improvement How to close out security nonconformities and improve the ISMS continually. Clause 10

See how ISO 27001 works in Kimobox and request a demo

← Back to the Academy

Every clause of ISO 27001, explained

ISO 27001 shares the same high-level structure (Annex SL) as ISO 9001, with a planning clause centered on risk analysis and the statement of applicability of Annex A controls.

This path explains each clause with the asset inventory, incident management and the evidence an information security auditor usually asks for.

Keep exploring

Related pages

Software for ISO 27001

ISO 27001, without folders or surprises

Asset inventory, risk analysis and Annex A controls, each with its status and owner.

 Training and best practices

Learn quality standards and BPM concepts without leaving the platform

Chapter-by-chapter guides on every ISO standard and sector protocol, plus the process management (BPM)…

 Quality portal

Your management system stops being a folder

Living documentation, planned audits, non-conformities with an owner, and indicators that calculate…

Sources

Where each figure comes from

References to the official text in force. If a standard is revised, this page is updated and the review date says so.

  1. ISO/IEC 27001:2022 — Information security management systems ISO/IEC · 25 October 2022
  2. ISO/IEC 27002:2022 — Information security controls ISO/IEC · February 2022
  3. Directive (EU) 2022/2555 (NIS2) EUR-Lex · Transposition deadline: 17 October 2024