What is ISO 27001?

• ISO 27001:2022 is the most current version of ISO 27001 that specifies the requirements for establishing, implementing, maintaining, and continually improving a privacy information management system (PIMS). The 2022 version includes an improved and updated annex, and clause language, 12 new controls, and modernized controls merged versions of 27001:2013 controls (the previous version). If you have questions about the current and prior versions (2013), you can check out our facts article here.

Who should be ISO 27001 compliant? 

• Companies are interested in formally certifying their privacy program against the international gold standard for privacy management.

What is the timeline for ISO 27001 compliance?

• Preparation will likely be 40 hours of prep time for each standard and 40 hours for compliance attestation. 

What can Vanta automate? 

• Tests
• Documents

Does ISO 27001 require a formal audit? 

• Yes