ISO/IEC 27006 is the reference international standard to be used by accreditation bodies in determining the suitability of bodies operating ISMS certification schemes. It is a normative standard and those bodies adopting it have to show full conformity to claim adherence to it. The publication of this standard and its adoption by accreditation bodies in those countries operating ISMS certification schemes serves to ensure consistency in accreditation and certification practices and in the mutual recognition of certificates issued under those schemes. It was first published in 2007 and the most recent revision was published in 2016, with an amendment published in 2020.