What we’ll talk about now is what’s involved when your third party auditor is on kent doing their review, and there are four parts to that cyclical process. Companies that adopt the holistic approach described in ISO/IEC 27001 ensure that information security is built into organizational processes, information systems, and management controls.