ISO 9000 3 – Engagement of people Principle 4 – Process approach Principle 5 – Improvement Principle 6 – Evidence-based decision making Principle 7 – Relationship management ISO 9001:2015 Quality management systems — Requirements is a document of approximately 30 pages which is available from the national standards organization in each country. Only ISO 9001 is directly audited against for third party assessment purposes. Contents of ISO 9001:2015 are as follows: Essentially the layout of the standard is similar to the previous ISO 9001:2008 standard in that it follows the Plan, Do, Check, Act cycle in a process-based approach, but is now
ISO/IEC 27006 ISO/IEC 27006 ISO/IEC 27006, part of a growing family of ISO/IEC Information Security Management System (ISMS) standards, the 'ISO/IEC 27000 series', is an information security standard published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). It is titled "Information technology - Security techniques - Requirements for bodies providing audit and certification of information security management systems". ISO/IEC 27006 lays out formal requirements for accredited organizations which certify other organizations compliant with ISO/IEC 27001. It effectively replaces EA 7/03 (Guidelines for the Accreditation of bodies operating certification/ registration of. Information Security Management Systems). The standard helps