Résumé
ISO/IEC 27004:2016 provides guidelines intended to assist organizations in evaluating the information security performance and the effectiveness of an information security management system in order to fulfil the requirements of ISO/IEC 27001:2013, 9.1. It establishes:
a) the monitoring and measurement of information security performance;
b) the monitoring and measurement of the effectiveness of an information security management system (ISMS) including its processes and controls;
c) the analysis and evaluation of the results of monitoring and measurement.
ISO/IEC 27004:2016 is applicable to all types and sizes of organizations.
Informations générales
-
État actuel: PubliéeDate de publication: 2016-12Stade: Clôture de l'examen [90.60]
-
Edition: 2
-
Comité technique :ISO/IEC JTC 1/SC 27ICS :35.030
- RSS mises à jour
Cycle de vie
-
Précédemment
AnnuléeISO/IEC 27004:2009
-
Actuellement
PubliéeISO/IEC 27004:2016
Les normes ISO sont réexaminées tous les cinq ans
Stade: 90.60 (En cours d'examen) -
Sera remplacée par
ProjetISO/IEC WD 27004