ISO 27001 Annex A: What Buyers Should Actually Ask For
Solomon Amos · 23 Oct 2026 · 9 min read
Changes
Every ingest is diffed against the previous snapshot. Events are typed, dated and idempotent, and they feed watchlist alerts and the weekly digest.
Drift index
Auditor changed from SecureIT to Emagine IT.
Auditor changed from Schellman Compliance, LLC to Coalfire Systems, Inc..
Auditor changed from Coalfire Systems, Inc. to Lazarus Alliance, Inc..
A IRAP row entered the index with state Vendor-stated.
A ISO/IEC 42001 row entered the index with state Vendor-stated.
Auditor changed from IGRC Square to SISA.
Expiry moved from 2026-10-31 to 2027-08-31.
Auditor changed from Avertium, LLC to KYTE Consultants, Ltd..
State moved from Verified to Expired.
Expiry moved from 2026-10-31 to 2027-03-31.
Auditor changed from TELUS Security Solutions to INFORMATION SECURITY MANAGEMENT, LLC.
Expiry moved from 2026-10-31 to 2027-05-31.
Auditor changed from VikingCloud, Inc. to Compliance Control Ltd..
Auditor changed from Panacea Infosec (P) Ltd. to Foregenix Ltd..
State moved from Verified to Expired.
State moved from Expired to Verified.
Auditor changed from VikingCloud, Inc. to SRC Security Research & Consulting GmbH.
State moved from Verified to Expired.
State moved from Verified to Expired.
Auditor changed from ControlCase, LLC to KYTE Consultants, Ltd..
State moved from Verified to Expired.
State moved from Expired to Verified.
State moved from Verified to Expired.
State moved from Verified to Expired.
State moved from Verified to Expired.
State moved from Expired to Verified.
State moved from Expired to Verified.
A EU-US Data Privacy Framework row entered the index with state Expired.
Expiry moved from 2026-10-31 to 2027-01-31.
Auditor changed from VikingCloud, Inc. to RSI Systems Inc..
State moved from Expired to Verified.
Expiry moved from 2026-10-31 to 2027-04-30.
Auditor changed from Bravecraft (Pty) Ltd to CYBERCREST, INC..
State moved from Verified to Expired.
State moved from Verified to Expired.
State moved from Expired to Verified.
State moved from Verified to Expired.
Expiry moved from 2026-10-31 to 2027-04-30.
State moved from Expired to Verified.
Expiry moved from 2026-10-31 to 2027-06-30.
Auditor changed from BOTECH FRAUD PREVENTION & INTELLIGENCE SL. dba Solver 4 to atsec (Beijing) Information Technology Co., Ltd.
A EU-US Data Privacy Framework row entered the index with state Expired.
Expiry moved from 2026-10-31 to 2027-08-31.
Auditor changed from SecurityMetrics, Inc. to Compliance Control Ltd..
State moved from Verified to Expired.
Expiry moved from 2026-10-31 to 2027-06-30.
Auditor changed from K3DES, LLC to INTEGRITY360 EUROPE LIMITED.
State moved from Expired to Verified.
State moved from Verified to Expired.
State moved from Verified to Expired.
Expiry moved from 2026-10-31 to 2027-02-28.
Auditor changed from Compliance Control Ltd. to SAFE WELKIN LIMITED.
Expiry moved from 2026-12-31 to 2027-06-30.
Auditor changed from usd AG to ControlCase, LLC.
State moved from Verified to Expired.
Expiry moved from 2026-10-31 to 2026-12-31.
Auditor changed from Vectra Corporation Ltd. to BOTECH FRAUD PREVENTION & INTELLIGENCE SL. dba Solver 4.
Expiry moved from 2026-10-31 to 2027-05-31.
Auditor changed from TUV Rheinland Indonesia, PT to KirkpatrickPrice, Inc. dba Raven Eye.
State moved from Verified to Expired.
State moved from Verified to Expired.
State moved from Verified to Expired.
State moved from Verified to Expired.
State moved from Verified to Expired.
State moved from Verified to Expired.
State moved from Verified to Expired.
State moved from Verified to Expired.
Expiry moved from 2026-12-31 to 2027-06-30.
Auditor changed from VikingCloud, Inc. to VOC Consultancy.
State moved from Expired to Verified.
Expiry moved from 2026-10-31 to 2026-11-30.
Auditor changed from Foregenix Ltd. to SISA.
Expiry moved from 2026-10-31 to 2026-11-30.
Auditor changed from SD7 Technology Group, LLC to atsec (Beijing) Information Technology Co., Ltd.
Auditor changed from Secure Vectors Information Technologies Inc. to ControlCase, LLC.
State moved from Verified to Expired.
Expiry moved from 2026-10-31 to 2027-03-31.
Auditor changed from BroadBand Security, Inc. (BBSec) to Nettitude Ltd..
Auditor changed from VikingCloud, Inc. to A-LIGN Compliance and Security, Inc., dba A-LIGN.
State moved from Verified to Expired.
State moved from Verified to Expired.
State moved from Verified to Expired.
State moved from Verified to Expired.
State moved from Verified to Expired.
State moved from Verified to Expired.
State moved from Verified to Expired.
Auditor changed from Teamwork IMS to PCI Consulting Australia PTY, LTD.
Expiry moved from 2026-10-31 to 2027-04-30.
Auditor changed from KirkpatrickPrice, Inc. dba Raven Eye to SecuriCentrix.
Auditor changed from Foregenix Ltd. to SD7 Technology Group, LLC.
State moved from Verified to Expired.
State moved from Verified to Expired.
Expiry moved from 2026-10-31 to 2027-10-31.
Auditor changed from KirkpatrickPrice, Inc. dba Raven Eye to Afenoid Enterprise Limited.
Expiry moved from 2026-10-31 to 2026-12-31.
Auditor changed from A-LIGN Compliance and Security, Inc., dba A-LIGN to TrustedSec, LLC.
Expiry moved from 2026-10-31 to 2027-03-31.
Auditor changed from Neil Gonsalves & Associates LLC, dba AARC-360 to ControlCase, LLC.
State moved from Expired to Verified.
State moved from Verified to Expired.
Solomon Amos · 23 Oct 2026 · 9 min read
Solomon Amos · 1 Sep 2026 · 10 min read