A much better method to strategy the question is usually to Feel of combining the advantages of ISO 27001 and 27002 into a totally purposeful, compliance-helpful bundle. When you do, you pair the described scope of 27001 with the main focus on controls such as penetration screening found in 27002 https://johnathanupdny.therainblog.com/7105227/how-much-you-need-to-expect-you-ll-pay-for-a-good-27001-iso-audit