By understanding the high-level expectation of certification audits, it becomes clear that the primary mechanism of the ISO/IEC 27001 framework is the detection and mitigation of vulnerabilities through a series of security controls.External and internal issues, bey well kak?m interested parties, need to be identified and considered. Requirements m