ISO/IEC 27001

Rare card · No. 69319

ISO/IEC 27001, titled Information security, cybersecurity and privacy protection — Information security management systems — Requirements, is an information security standard. It specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS) within the context of the organization, and includes requirements for the assessment and treatment of information security risks. The requirements are generic and are intended to be applicable to all organizations, regardless of type, size or nature. The requirements are set out in clauses 4 to 10, covering the context of the organization, leadership, planning, support, operation, performance evaluation and improvement; an annex to the standard lists a reference set of information security controls, for which ISO/IEC 27002 supplies the purpose and implementation guidance. An organization may implement the standard for its own purposes, or have its ISMS certified as conforming...

Read on Wikipedia · Image Unknown authorUnknown author, Public domain