.png?width=387&height=387&name=image%20(5).png)
A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
Glossary › ISO/IEC 27001
What is ISO/IEC 27001 ?
ISO/IEC 27001 defines requirements for establishing, implementing, and maintaining a structured ISMS that protects information assets. Certification signals mature governance, risk management, and security practices. In TPRM, ISO 27001 certification is a strong indicator of vendor control maturity.
FAQs
Does ISO 27001 guarantee security?
No, but it demonstrates structured governance.
Do vendors need certification?
Not mandatory, but often preferred.
Does ISO require audits?
Yes, regular external audits are required.
Responsible-AI TPRM Guide
Discover how risk teams apply AI responsibly to reduce third-party blind spots and stay audit-ready across global regulations.