Getting HR Ready for ISO 27001

Good auditors don't audit control lists — they audit the employee lifecycle. Here's how to prepare HR and IT together.

When companies prepare for an ISO 27001 certification audit, HR is often the last department to get attention. The thinking usually goes like this: the ISMS is an IT topic, the auditor will spend most of their time with the CISO and the infrastructure team, and HR just needs to show a few signed contracts and a training record.

Then the audit happens, an…