| Source | Format | Cost (Approx.) | Notes | |--------|--------|----------------|-------| | | PDF (watermarked) | ~138 CHF | Official source, always current | | IEC Webstore | PDF | ~138 CHF | Same as above | | ANSI (USA) | PDF | ~$170 | American national adopters | | BSI (UK) | PDF | ~£140 | British Standards Institution | | SAI Global | PDF | Varies | Regional resellers |
When you open the ISO IEC 27008 PDF (legally), you will encounter a structured approach to auditing. The standard covers several key domains:
Most ISMS audits are weak on technical verification. Using ISO 27008, create procedures for:
Read if you need:

