
Like governance and risk management, information security management is a broad topic with ramifications for all organizations. Its lineage stretches back more than 30 years to the precursors of BS 7799.

ISO/IEC 27002 is a popular, internationally-recognized standard of good practice for information security. Status of the standard with notes about the 3rd edition being draftedĪbstract “This International Standard offers a collection of commonly accepted information security control objectives and controls and includes guidelines for implementing these controls.” Introduction ISMS implementation guidance and further resources Introduction to ISO/IEC 27002 ( scope and relationship to ISO/IEC 27001)Ĭontents of ISO/IEC 27002 (outline of the 19+ sections) While individuals and companies cannot become members of ISO, there are various ways that industry experts can collaborate with the ISO.ISO/IEC 27002:2013 - Information technology - Security techniques - Code of practice for information security controls (second edition)

Members of the organization are the foremost standards organizations in their countries there is only one member per country. After being suspended during World War II, the United Nations Standards Coordinating Committee (UNSCC) proposed a new global standards body and the International Organization for Standardization was formed. The International Organization for Standardization was founded in 1947 and is headquartered in Geneva, Switzerland. The organization began in the 1920s as the International Federation of the National Standardizing Associations (ISA).

Understanding the International Organization for Standardization (ISO)

In addition to producing standards, ISO also publishes technical reports, technical specifications, publicly available specifications, technical corrigenda, and guides.The International Organization for Standardization (ISO) was founded in 1947 and is headquartered in Geneva, Switzerland.The International Organization for Standardization (ISO) is an international nongovernmental organization made up of national standards bodies that develops and publishes a wide range of proprietary, industrial, and commercial standards.
