The Only aspect You can't do your self will be the certification audit, which must be finished by an external accredited entire body. Amongst ISO 27001’s needs is Command objective A12.six: Specialized Vulnerability Administration. It states that companies have to be proactive about exploring vulnerabilities and acquire motion to address https://calvant.com/blog/iso-27001-vs-soc-2-comparison-differences-benefits