What exactly is assessed during an ISO 27001 audit?

“In addition to documented processes, the primary focus is on determining whether measures are effective in practice. What matters most is their actual implementation within the existing IT environment.”