Answer only the part of a standard you apply for; the audit time of that standard is worked from it.
Only if you apply for ISO/IEC 27001 (information security) The sector you work in Choose… Not critical and not regulated Your customers are in critical sectors You work in a critical sector (health, security, economy, government) Your processes and tasks Choose… Standard and repetitive, few products or services Standard but not repetitive, many products or services Complex, many products and services, many business units How established your management system is Choose… Established, or other management systems are in place Some elements of other systems are in place New, with no other management system Your IT infrastructure Choose… Few or highly standardized platforms, servers and networks Several different platforms, servers and networks Many different platforms, servers and networks Your dependence on outsourcing, suppliers and cloud services Choose… Little or none Some, for some important activities High, with a large impact on important activities Your system and application development Choose… None, or very limited Some, in-house or outsourced, for important purposes Extensive, in-house or outsourced, for important purposes