Management of technical vulnerabilities
Identify, assess and treat vulnerabilities.
home / compliance
compliance · ISO 27001
ISO 27001 penetration testing: evidence for the audit
Certification needs evidence of vulnerability management and security testing. A traceable, repeatable test provides it.
what the standard asks
The reference controls.
Security testing
Security testing during development and before acceptance.
what we produce
The evidence we deliver.
Traceable report
Scope, method, dates and vulnerabilities with reproduction steps.
Fix log
Each vulnerability with its status and closure date.
Repeat of tests
A repeatable test to confirm closure.
Summary for management
A summary of risks and actions.
summary
At a glance.
| Item | Detail |
|---|---|
| Who judges | The accredited certification body |
| Related services | OWASP Top 10 testing and infrastructure testing |
| Typical frequency | Before certification and at least yearly |
Limits. The certification body decides. We provide the proof.
Want evidence for your ISO 27001 certification?
We reply by hand with a written proposal.