All types Page Article White Paper Download
Solutions The best route to security compliance
Hicomply Privacy™ ISO 27001 ISO 9001 ISO 14001 SOC 2 NHS DSPT NIST 800-53 Hicomply GRC™ Services & Customer Support
Platform A powerful suite of ISMS features
Dashboard ISMS Scoping Policy Management Risk Management Information Asset Management Task Management Integrations Hicomply for Enterprises Trust Centre Controls Monitor Hicomply AI
Resources Everything you need to know
Knowledge & Insights Resources Hub Case Studies Sectors Glossary News ROI Calculator
Knowledge Base Learn more about infosec
ISO 27001 Knowledge Base SOC 2 Knowledge Base NHS DSPT Knowledge Base PCI DSS Knowledge Base NIST 800-53 Knowledge Base DORA Knowledge Base
Company Security and customers first
About News Partners Contact

ISO 27001 Clause 4

Read about the requirements for ISO 27001 Clause 4 that organisations should be aware of when researching, establishing, implementing, maintaining, and continually improving their information security management system (ISMS).

Navigate through the following subclauses to more effectively understand the details of each step of the process.

Read More

ISO 27001 Clause 4.1

This clause covers understanding the internal and external issues that your organisation should consider in the context of creating an ISMS. We provide some examples of both types of issues to look out for.

ISO 27001 Clause 4.2

The second clause addresses understanding the needs and expectations of interested parties, including examples of how to identify these parties and stakeholder mapping to identify their needs.

ISO 27001 Clause 4.3

This clause focuses on taking the learnings from clauses 4.1 and 4.2 and using them to determine what is in and out of the scope of your ISMS.

ISO 27001 Clause 4.4

This clause simply states the requirements of organisations in terms of their ISMS: establishing, implementing, maintaining, and continually improving their information security management system.