ISO TR 27008 – A technological report (in lieu of common) which provides guidance on auditing the information security controls managed by your ISMS. Supply a file of evidence gathered relating to the documentation and implementation of ISMS competence utilizing the form fields under. Offer a report of evidence http://simonrtrpk.jaiblogs.com/18942266/iso-27001-audit-questionnaire-things-to-know-before-you-buy