Skip to content

Glossary: Business Risk, Third Parties and Compliance

ISO/IEC 27001

Also written: ISO 27001, ISO/IEC 27001 certificate

An international standard for information security management systems. A certificate from an accredited body shows a vendor meets it, usually for three years with a surveillance audit each year.

Where the book teaches it

Related terms

Compliance attestationSurveillance audit