ISO/IEC 27007
E514702
ISO/IEC 27007 is an international standard that provides guidelines for auditing information security management systems based on ISO/IEC 27001.
All labels observed (1)
| Label | Occurrences |
|---|---|
| ISO/IEC 27007 canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T5362763 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: ISO/IEC 27007 Context triple: [ISO/IEC 27000 family, includesStandard, ISO/IEC 27007]
-
A.
ISO/IEC 27003
ISO/IEC 27003 is an international standard that provides guidance on implementing and managing an information security management system (ISMS) in accordance with ISO/IEC 27001.
-
B.
ISO/IEC 27005
ISO/IEC 27005 is an international standard that provides guidelines for information security risk management within an organization’s overall information security management system.
-
C.
ISO/IEC 27004
ISO/IEC 27004 is an international standard that provides guidelines for measuring and evaluating the effectiveness of an information security management system (ISMS) within the ISO/IEC 27000 family.
-
D.
ISO/IEC 27002
ISO/IEC 27002 is an international standard that provides best-practice guidelines and controls for information security management.
-
E.
ISO/IEC 27000 family
The ISO/IEC 27000 family is an international set of standards that provides best-practice frameworks and requirements for establishing, implementing, maintaining, and continually improving information security management systems.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: ISO/IEC 27007 Target entity description: ISO/IEC 27007 is an international standard that provides guidelines for auditing information security management systems based on ISO/IEC 27001.
-
A.
ISO/IEC 27003
ISO/IEC 27003 is an international standard that provides guidance on implementing and managing an information security management system (ISMS) in accordance with ISO/IEC 27001.
-
B.
ISO/IEC 27005
ISO/IEC 27005 is an international standard that provides guidelines for information security risk management within an organization’s overall information security management system.
-
C.
ISO/IEC 27004
ISO/IEC 27004 is an international standard that provides guidelines for measuring and evaluating the effectiveness of an information security management system (ISMS) within the ISO/IEC 27000 family.
-
D.
ISO/IEC 27002
ISO/IEC 27002 is an international standard that provides best-practice guidelines and controls for information security management.
-
E.
ISO/IEC 27000 family
The ISO/IEC 27000 family is an international set of standards that provides best-practice frameworks and requirements for establishing, implementing, maintaining, and continually improving information security management systems.
- F. None of above. chosen
Statements (40)
| Predicate | Object |
|---|---|
| instanceOf |
information security standard
ⓘ
international standard ⓘ |
| aimsTo |
promote consistency in ISMS auditing
ⓘ
support effective ISMS audits ⓘ |
| appliesTo |
external ISMS audits
ⓘ
internal ISMS audits ⓘ organizations implementing ISO/IEC 27001 ⓘ second-party ISMS audits ⓘ third-party ISMS audits ⓘ |
| basedOn |
ISO/IEC 27001
ⓘ
linked to:
ISO 27001
|
| concerns |
evaluation of ISMS conformity with ISO/IEC 27001
ⓘ
evaluation of ISMS effectiveness ⓘ |
| defines |
guidelines for ISMS audit activities
ⓘ
guidelines for ISMS audit management ⓘ guidelines for ISMS audit program ⓘ guidelines for ISMS auditor competence ⓘ |
| focusesOn | information security management systems auditing ⓘ |
| geographicalScope | international ⓘ |
| governs |
conduct of ISMS audits
ⓘ
follow-up of ISMS audits ⓘ planning of ISMS audits ⓘ reporting of ISMS audits ⓘ |
| language | English ⓘ |
| partOfSeries | ISO/IEC 27000 family ⓘ |
| providesGuidelinesFor | auditing information security management systems ⓘ |
| publishedBy |
International Electrotechnical Commission
ⓘ
International Organization for Standardization ⓘ |
| relatedTo |
ISO/IEC 27000
ⓘ
linked to:
ISO/IEC 27000 family
ISO/IEC 27002 ⓘ ISO/IEC 27006 ⓘ |
| scope | guidance for auditing ISO/IEC 27001-based ISMS ⓘ |
| standardFamily |
ISO/IEC 27000-series standards
ⓘ
linked to:
ISO/IEC 27000 family
|
| subjectArea |
information security
ⓘ
management systems ⓘ |
| supports | continual improvement of ISMS audits ⓘ |
| targetAudience |
ISMS audit program managers
ⓘ
ISMS auditors ⓘ organizations seeking ISMS certification ⓘ |
| typeOfGuidance | management system auditing guidance ⓘ |
| uses |
ISO 19011 as a reference for auditing principles
ⓘ
linked to:
ISO 19011
|
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: ISO/IEC 27007 Description of subject: ISO/IEC 27007 is an international standard that provides guidelines for auditing information security management systems based on ISO/IEC 27001.
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.