The ISO/IEC 27001 certification,[5] like other ISO management system certifications, usually involves a three-stage external audit process defined by the ISO/IEC 17021[6] and ISO/IEC 27006[7] standards: