Skip to content

ISO 27001

Annex A evidence that keeps itself current.

LEA Platform maps hardening checks to ISO 27001 Annex A controls, such as configuration management, cryptography and logging, and snapshots the evidence on a schedule.

How LEA Platform helps

  • Configuration management

    Hosts checked against your baseline on every cycle.

  • Evidence on schedule

    Signed snapshots, daily by default.

  • Two GRC reports

    Technical gap analysis and legal exposure.

  • Auditor report

    Evidence integrity and audit trail.

Example rules

Scroll sideways to see the full table

Example ISO 27001 rules
RuleAnnex A controlPlatform
Kernel ASLR Fully EnabledA.8.9 Configuration managementLinux
SSH Legacy Algorithms DisabledA.8.24 Use of cryptographyLinux, macOS
Windows SMBv1 Server DisabledA.8.9, A.8.21Windows
Audit Rules Watch Sudoers ChangesA.8.15 LoggingLinux
SSH Empty Password Logins RejectedA.8.5 Secure authenticationLinux, macOS

See a sample ISO 27001 report

LEA Platform produces evidence; certification is granted only by an accredited auditor.

FAQ

Try it on your own servers.

30 days, up to 25 endpoints, every feature. We help you install it and agree on success criteria first.