New answers tagged

1 vote

ISO 27001: do we need audit access to the code of the core application

No, it is not normal for a ISO 27001 auditor to review code. However, if you claim as part of your ISMS that you perform code reviews of the vendor's code, then the auditors will want to see proof of ...
schroeder's user avatar
  • 129k

Top 50 recent answers are included