Auditing people-related controls in ISO 27001:2022 is one of the most critical – and often underestimated – parts of an Information Security Management System (ISMS) audit. Clause 6 of Annex A focuses on People Controls, covering role definition, awareness, education, ...