Evidence Flows

workflow

ISO 27001 Stage 1 ISMS Documentation Review

Certification-body Stage 1 review of the ISMS against ISO/IEC 27001:2022 clauses 4–10: context and leadership, planning and support, operation, and performance evaluation with improvement - walking each clause group against the governing documents and the operating processes that carry it, and concluding Stage 2 readiness with dual sign-off. Stage 1 documentation and readiness review for ISO/IEC 27001:2022 clauses 4–10, conducted under the engagement methodology. It informs Stage 2 planning and does not issue a certification decision. Attach this workflow to the existing audit engagement item; retain evidence and conclusions on its workflow steps.

In catalog since 2026-09-17T22:28:00Z · Last changed 2026-10-04T21:48:26Z (791ff2dd3a45)

Record JSON · Open in map · Data retrieval guide

Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.

Attributes

domain
audit
department
internal-audit
lineOfDefense
assure

Details

teams
  • internal-audit
domains
  • audit
standards
  • iso-27001
sourceTemplateId
workflow-library:audit-iso27001-stage1-documentation-review
releaseId
sha256:8e32844a40edb10a10507f0cd66f991d24ac5443d56559d159ac00ea5841e3c1
canonicalUrl
https://evidenceflows.com/workflows/all/?w=audit-iso27001-stage1-documentation-review
capabilities
    mappingStatus
    mapped
    lineOfDefense
    assure
    controls
    • UC-AUDIT-21
    • UC-AUDIT-22
    • UC-AUDIT-23
    • UC-AUDIT-25
    • UC-CONFIG-02
    • UC-GOV-02
    • UC-GOV-06
    • UC-GOV-11
    • UC-GOV-12
    • UC-GOV-14
    • UC-GOV-15
    • UC-GOV-16
    • UC-HR-06
    • UC-RISK-03
    • UC-RISK-06
    • UC-RISK-09
    • UC-RISK-14
    • UC-RISK-15
    • UC-TRAIN-01
    roleIntegrity
    activityCount
    0
    ermPhases
      lineRoles
        serviceModes
          warnings
          • code
            reliance-basis-incomplete
            title
            Reliance basis is incomplete
            message
            Template-design warning: material reliance is mapped without a tagged step covering the full provider-reliance basis.
            missing
            • independence
            • competence
            • evidence
            • recency
            • reliance rationale
            nodeIds

            Source

            No record-specific source URL is provided.

            Download workflow template · Release: sha256:8e32844a40edb10a10507f0cd66f991d24ac5443d56559d159ac00ea5841e3c1

            Connections