ISO/IEC 27004
Information technology - Security techniques - Information security management - Measurement
inactive
Buy Now
| Organization: | ISO |
| Publication Date: | 15 December 2009 |
| Status: | inactive |
| Page Count: | 64 |
| ICS Code (Information coding): | 35.040 |
scope:
This International Standard provides guidance on the development and use of measures and measurement in order to assess the effectiveness of an implemented information security management system (ISMS) and controls or groups of controls, as specified in ISO/IEC 27001.
This International Standard is applicable to all types and sizes of organization.
NOTE This document uses the verbal forms for the expression of provisions (e.g. "shall", "shall not", "should", "should not", "may", "need not", "can" and "cannot") that are specified in the ISO/IEC Directives, Part 2, 2004, Annex H. See also ISO/IEC 27000:2009, Annex A.
Document History
December 15, 2016
Information technology - Security techniques - Information security management - Monitoring, measurement, analysis and evaluation
This document provides guidelines intended to assist organizations in evaluating the information security performance and the effectiveness of an information security management system in order to...
ISO/IEC 27004
December 15, 2009
Information technology - Security techniques - Information security management - Measurement
This International Standard provides guidance on the development and use of measures and measurement in order to assess the effectiveness of an implemented information security management system...