[organization name] [confidentiality level]

Appendix – ISO 27001 Internal Audit Checklist for Annex A controls Commented [EUGDPR1]: To learn how to use this document,
see this free online training ISO 27001 Internal Auditor Course:
http://training.advisera.com/course/iso-27001-internal-auditor-
** FREE PREVIEW VERSION ** course/

Control Requirement of the standard Compliant Evidence Commented [EUGDPR2]: These are the requirements of the
Annex A of ISO 27001 standard; you should also insert the specific
ID Yes/No requirements of your own documentation.
Are all necessary information security policies Commented [EUGDPR4]: To be filled in during the audit –
A.5.1.1 approved by management and published? records, verbal statements or auditor personal observations that
confirm the finding.

A.5.1.2 … Commented [EUGDPR3]: To be filled in during the audit – fill

in Yes or No depending on whether the company is compliant or
Are all information security responsibilities not.
clearly defined through one or several
A.6.1.1 documents?

A.6.1.2 …
Is it clearly defined who should be in contact
A.6.1.3 with which authorities?

A.6.1.4 …
Are information security rules included in
A.6.1.5 every project?

A.6.2.1 …
Are there rules defining how the company
A.6.2.2 information is protected at teleworking sites?

A.7.1.1 …

A.7.1.2 …
Is management actively requiring all
employees and contractors to comply with
A.7.2.1 information security rules?

A.7.2.2 …
Have all employees who have committed a
security breach been subject to a formal
A.7.2.3 disciplinary process?

A.7.3.1 …

A.8.1.1 Is an Inventory of assets drawn up?

A.8.1.2 …
Are the rules for appropriate handling of
A.8.1.3 information and assets documented?

A.8.1.4 …

A.8.2.1 …
ISO 27001 Internal Audit Checklist ver [version] from [date] Page 1 of 2

©2017 This template may be used by clients of Advisera Expert Solutions Ltd. in accordance with the License Agreement.
[organization name] [confidentiality level]

** END OF FREE PREVIEW **

To download full version of this document click here:

https://advisera.com/eugdpracademy/documentation/iso-27001-internal-audit-checklist/

ISO 27001 Internal Audit Checklist ver [version] from [date] Page 2 of 2

©2017 This template may be used by clients of Advisera Expert Solutions Ltd. in accordance with the License Agreement.