Preparing for ISO 27001
Keep your vulnerability records ready for ISO 27001
Keep dependency findings, owners, deadlines, and decisions together. Use the history to explain how your team handled each vulnerability during your ISO 27001 review.
What this covers
Where vulnerability records fit
ISO/IEC 27001:2022, Annex A 8.8
Annex A 8.8 covers managing technical vulnerabilities. Your records help explain what you found, how you assessed the risk, and what you did about it.
Before the review
What your reviewer asks for, and where it lives in Proveta
Confirm the evidence you need with your reviewer.
01The findings your team reviewed
Findings from Dependabot and Proveta scans land in one ranked list, with the decision your team made on each.
02Who made each decision and when
Each decision records the owner, the reason, and the date. Later decisions add to the history and keep the earlier ones.
03Why a risk was accepted and when to review it again
Record who accepted the risk, why it can wait, and when the acceptance expires. Active, expiring, and expired risks show separately.
04Your deadlines and any that were missed
Set a time limit for each severity. Proveta tracks findings against it and keeps a record when a deadline is missed.
Start now
Prepare for your ISO 27001 review
Scan your dependencies, bring in your Dependabot alerts, and export the decision record for your ISO 27001 review dates.
- Free for 1 repo
- Your team controls merging
- No password to create