ISO 27001 (2013): Full

Full, certification-level ISMS. Complete set of security controls along with management, auditing and risk evaluation aspects.

• Management-driven tasks e.g. about ISMS management, risk evaluation and treatment and internal auditing.
• Advanced tasks e.g. about procurement, physical security, other information assets and vulnerability management
• Advanced documentation e.g. risks, non-conformities and improvements

Audited security expands the basics covered by Core security and advanced controls covered by Extended security.