ISO 27007 is an international standard that provides guidelines for auditing information security management systems (ISMS). It’s part of the ISO 27000 series of standards, which provide guidelines and best practices for information security management. ISO 27007 is intended to help organizations conduct effective audits of their ISMS and ensure that it meets the requirements of ISO 27001.

The standard provides guidance on planning, conducting, and reporting on an ISMS audit, including selecting appropriate audit criteria, collecting and analyzing audit evidence, evaluating the findings, and making recommendations for improvement. It’s intended to be used by organizations that are implementing or maintaining an ISMS, as well as by third-party auditors who are conducting audits of ISMS.