ISO 27001:2022 Stage 1 Audit?

Don’t panic—start with this checklist of 10 essential evidence documents. Stage 1 isn’t a formality. Fail here = No Stage 2. ✅ Key docs you must have: • SoA • Risk Assessment & Treatment Plan • Internal Audit Report • Asset Inventory • Roles & Responsibilities • Legal Register • Training Logs • Controls Matrix • Communication Plan • Management Review Minutes (most missed!) 💡Auditors check alignment: SoA ➝ Policies ➝ Actual Evidence At Azpirantz, we help you get audit-ready with: ✔️ Information Security Management System (ISMS) ✔️ Continuous Monitoring and Review ✔️ Incident Management