Standard
ISO/IEC 27001:2022
Information Security Management System
The global gold standard for cybersecurity assurance — built around a risk-driven ISMS.
Benefits
- Enterprise trust
- Regulatory alignment (DPDP, GDPR, HIPAA)
- Reduced breach likelihood
- Faster procurement & sales cycles
- Better vendor management
Requirements
- Risk assessment & treatment
- Statement of Applicability (Annex A)
- Security policies & standards
- Access, cryptography, ops controls
- Incident response
- Continual improvement
Certification process
- 01Application & scope
- 02Auto eligibility & mandays
- 03Documented information review
- 04Stage 1 readiness audit
- 05Corrective actions
- 06Stage 2 audit
- 07Independent decision
- 08Certificate issued
- 09Annual surveillance
- 10Recertification (Year 3)
Frequently asked questions
- How long does certification take?Typically 6–12 weeks depending on scope, sites and readiness.
- Is the certificate globally recognised?Yes — under the IAF Multilateral Recognition Arrangement.
- Can we transfer an existing certificate?Yes — see /certification/transfer-certification.
- Do you provide the standard document?No — IREA does not distribute ISO standards; buy from ISO/national body.