Compliance
ISO/IEC 27001
ISO/IEC 27001 is the international standard for an Information Security Management System (ISMS).
What it is
ISO/IEC 27001 sets out a risk-based framework for establishing, operating and continually improving an ISMS. Its controls include technical vulnerability management — identifying, assessing and remediating weaknesses in systems and networks.
Background
Published jointly by ISO and IEC (current edition ISO/IEC 27001:2022), it is one of the most widely adopted security standards worldwide. Organisations are certified against it by accredited certification bodies following an audit.
How EthicalStrike helps
Regular testing with EthicalStrike provides evidence for technical vulnerability management, and the compliance-mapped reports give auditors a clear record of what was tested, what was found, and how it was remediated.
EthicalStrike supports your compliance efforts by testing your network and mapping findings to this framework. It is not a substitute for formal certification or an audit by an accredited body.