#toegangsbeheer

ISO 27001 Annex A.9: What the Auditor Really Wants to See

Annex A.9 — Access Control — is the most demanding of the 14 sections. Here's a practical breakdown per sub-control: A.9.1 through A.9.4, with what actually works as evidence in an SMB context.