ISO/IEC-27004 › Information technology - Security techniques - Information security management - Monitoring, measurement, analysis and evaluation
Show Complete Document History
The following bibliographic material is provided to assist you with your purchasing decision:
ISO/IEC 27004:2016 provides guidelines intended to assist organizations in evaluating the information security performance and the effectiveness of an information security management system in order to fulfil the requirements of ISO/IEC 27001:2013, 9.1. It establishes:
a) the monitoring and measurement of information security performance;
b) the monitoring and measurement of the effectiveness of an information security management system (ISMS) including its processes and controls;
c) the analysis and evaluation of the results of monitoring and measurement.
ISO/IEC 27004:2016 is applicable to all types and sizes of organizations.
To find similar documents by classification:
03.100.70 (Management systems Standards included in this sub-group shall also be included in other groups and/or sub-groups according to their subject Including environmental management systems (EMS), road traffic management systems, energy management systems, health care management systems, etc.)
This document comes with our free Notification Service, good for the life of the document.
This document is available in either Paper or PDF format.
Dec. 15, 2016
ISO/IEC JTC 1/SC 27