Information Security Audit (ISO/IEC 27007) FoundationOverview The ISO IEC 27007 provides guidance on managing an information security management system (ISMS) audit programme, on conducting audits, and on the competence of ISMS auditors. The Information Security Audit Foundation (ISO IEC 27007) is a certification intended for IT professionals seeking to validate their knowledge of the ISO IEC 27007. Exam Content The exam covers topics such as Terms and definitions, Normative references, Principles of