Every Checklist comes with four hours of free consultation. SEPT will answer any question concerning the standard or Checklist for 60 days after purchase. New! Order the "Self-Extracting File Format" option to get this product in an editable Microsoft Word document! ISO/IEC 27001:2013 gives requirements for organizational information security standards and information security management practices including the selection, implementation and management of controls taking into consideration the organization's information security risk environment(s). It is designed to be used by organizations that intend to: 1. select controls within the process of implementing an Information Security Management System based on ISO/IEC 27001; 2. implement commonly accepted information security controls; 3. develop their own information security management practices The requirements included in the ISO/IEC 27001:2013 standard are listed at a high level with an Annexed reference to ISO 27002:2013 as appropriate guidance to demonstrate conformance to ISO/IEC 27001:2013. If an Organization is interested in testing their conformance to ISO/IEC 27001:2013 this checklist will provide an analysis of the detail in the ISO/IEC 27001 standard. However, if the organization is only interested in the guidance in ISO/IEC 27002:2013 this checklist provides a list of all items suggested in Annex A of ISO/IEC 27001 that are derived from the ISO/IEC 27002 guidelines. They are addressed in detail in the Introduction to the checklist and in section 9.