If you have been searching for an , you are likely not looking to implement a security framework yourself. Instead, you are probably an auditor, a certification body, or a compliance officer trying to understand how certification bodies are assessed. You may also be an organization that wants to peek behind the curtain to see what requirements your registrar must follow.
To obtain an authentic :
This deals with the organizational structure. Who owns the Certification Body? Does the owner also own a consultancy firm? This section outlines the top management structure required to ensure that commercial pressures do not compromise the integrity of the audit. iso 27006 pdf