The ISO/IEC 27000-series (also known as the ‘ISMS Family of Standards’ or ‘ISO27K’ for short) comprises information security standards published jointly by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC).[1]
The series provides best practice recommendations on information security management—the management of information risks through information security controls—within the context of an overall Information security management system (ISMS), similar in design to management systems for quality assurance (the ISO 9000 series), environmental protection (the ISO 14000 series) and other management systems.[2][3][4]
The series is deliberately broad in scope, covering more than just privacy, confidentiality and IT/technical/cybersecurity issues. It is applicable to organizations of all shapes and sizes. All organizations are encouraged to assess their information risks, then treat them (typically using information security controls) according to their needs, using the guidance and suggestions where relevant. Given the dynamic nature of information risk and security, the ISMS concept incorporates continuous feedback and improvement activities to respond to changes in the threats, vulnerabilities or impacts of incidents.
ISO/IEC 27018:2019 – Information Technology — Security Techniques Certification Abstract ISO/IEC 27018:2019 provides guidelines for protecting personal data in the […]
ISO 27018 : 2019 Information Technology — Security Techniques certification Read More »
ISO/IEC 27018:2019 is not a certification itself, but rather an international standard that provides guidelines for protecting Personally Identifiable Information
ISO 27018 : 2019 Information Technology — Security Techniques certification Read More »
