6.15.2.1
Independent review of information security
The control, implementation guidance and other information stated in ISO/IEC 27002:2013, 18.2.1 and the following additional guidance applies:
6.15.2.2
Compliance with security policies and standards
The control, implementation guidance and other information stated in ISO/IEC 27002:2013, 18.2.2 applies.
6.15.2.3
Technical compliance review
The control, implementation guidance and other information stated in ISO/IEC 27002:2013, 18.2.3 and the following additional guidance applies: