Section 9 of 9 · Reference: certification practice under ISO/IEC 17021-1 and ISO/IEC 27006 and related frameworks; the certification procedures themselves are not the subject of ISO/IEC 27001

Certification & related standards

The last section moves beyond the standard itself: how does certification work, how are the organizations involved arranged hierarchically, and which related standards will you encounter in practice – from BSI IT-Grundschutz (the German Federal Office for Information Security’s baseline protection methodology) to TISAX and ITIL 4.