supernav-iconGet & Stay Compliant: A Beginner's Guide to SOC2
Contact Sales
Drata Wordmark Black
  • Solutions
    • Platform
      • Startup
      • Scale
      • Audit Hub
      • Trust Center
      • Risk Management
      • Open API
      • Integrations
    • Frameworks
      • Cyber Essentials
      • SOC 2
      • ISO 27001
      • HIPAA
      • GDPR
      • Custom Frameworks
      • All Frameworks
    • SOC 2 Compliance: A Beginner's Guide
      Access the Guide
      SOC 2 Guide
  • Resources
    • Resources
      • Blog
      • Events
      • Webinars
      • Reports
      • Compliance Glossary
      • Community
      • API Documentation
    • Featured
      • Cloud Service Provider's Guide to FedRAMP
      • Navigating Fintech Risk and Compliance
      • A Start-to-Finish Guide on SOC 2 Compliance
      • A Complete Guide to Cybersecurity Risk Management
    • Navigating the Fintech Risk and Compliance Ecosystem
      Download
      Navigating the Fintech Risk and Compliance Ecosystem
  • Auditors
  • Customers
  • Company
    • Company
      • Careers
      • Auditors
      • Partners
      • Press
      • Security
      • Contact Us
    • Drata Named One of the Best Workplaces in Technology
      Read More
      Drata Linkedin Global Nav
  • Sign In
  • Get Started
  • Sign In
  • Get Started
HomeCompliance GlossaryISO 27006

ISO 27006

ISO 27006 is an international standard that specifies requirements for the certification of information security management systems (ISMS).


It provides a framework for organizations to have their ISMS certified by a third-party certification body. ISO 27006 is intended to help organizations demonstrate the effectiveness of their information security management practices and gain recognition for their efforts.


To become certified, an organization must implement an ISMS that meets the requirements of ISO 27001 and be audited by a certification body that is accredited by a national accreditation body. The certification process typically involves several stages, including an initial assessment, a formal audit, and a surveillance audit, to ensure the organization meets the certification requirements.

Join the thousands of companies that trust Drata

See All Case Studies
Abnormal Logo
Airbase
BambooHR Logo
Clearco Logo
Clearbit Logo
Superhuman
Lemonade Logo
Fivetran Logo
Notion Logo
Vercel Logo
Wordpress VIP
Calendly Logo

View Drata Glossary

Learn more about other compliance and cybersecurity concepts in our glossary.

Read More
Drata Wordmark White

Drata is a security and compliance automation platform that continuously monitors and collects evidence of a company’s security controls, while streamlining workflows to ensure audit-readiness.

Solutions

StartupScaleEnhanceDrata PlatformIntegrations
Frameworks
Cyber EssentialsSOC 2ISO 27001HIPAAGDPRCustom FrameworksAll Frameworks
Resources
BlogEventsWebinarsReportsCompliance GlossaryCommunityAPI Documentation
Company
Careers
HIRING
CustomersAuditorsPartnersPressContact Us
Trust
Security and ComplianceTrust CenterSystem Status
Become a Trusted Newsletter Insider

The latest security and compliance news, delivered.


© 2023 Drata Inc. All rights reserved.

Privacy PolicyGDPRTermsCookiesDisclosure PolicySub-processorsData Processing Addendum