What is ISO 27002: 2017 ?

ISO 27002: 2017 and EN ISO 27007: 2017 are both important international standards that help organizations establish and maintain effective information security management systems (ISMS). These standards provide guidelines and best practices for establishing, implementing, maintaining, and continually improving an organization's ISMS.

ISO 27002: 2017, also known as Information technology - Security techniques - Code of practice for information security controls, is an international standard published by the International Organization for Standardization (ISO). It provides guidelines and best practices for establishing, implementing, maintaining, and continually improving an organization's information security management system. The standard helps organizations identify and address their security risks effectively, and establish robust security controls to minimize the likelihood of security incidents, data breaches, and unauthorized access.

EN ISO 27007: 2017 is an international standard that provides guidelines for the audit and certification of information security management systems (ISMS) based on the ISO/IEC 27001 standard. It focuses specifically on the requirements for auditing ISMS and offers guidance to internal and external auditors. The standard helps organizations establish a systematic approach to conducting audits and assesses the effectiveness of their ISMS implementation.

Both ISO 27002: 2017 and EN ISO 27007: 2017 are important standards that can help organizations establish effective ISMS, minimize the likelihood of security incidents and data breaches, and ensure the confidentiality, integrity, and availability of their information. By adopting the standard's recommendations, organizations can establish robust security controls and improve their overall information security management.