ISO/IEC 27001:2022/Performance evaluation/24 of 123
9.2.1General - Internal audit
Control family: Performance evaluation
Control description
The organization shall conduct internal audits at planned intervals to provide information on whether
the information security management system:
a) conforms to
1) the organization’s own requirements for its information security management system;
2) the requirements of this document;
b) is effectively implemented and maintained.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.