World Library  
Flag as Inappropriate
Email this Article

Iso/iec 27004

Article Id: WHEBN0012791085
Reproduction Date:

Title: Iso/iec 27004  
Author: World Heritage Encyclopedia
Language: English
Subject: List of International Organization for Standardization standards, Information security management system, ISO/IEC 27002
Collection:
Publisher: World Heritage Encyclopedia
Publication
Date:
 

Iso/iec 27004

ISO/IEC 27004:2009, part of a growing family of ISO/IEC ISMS standards, the 'ISO/IEC 27000 series', is an information security standard developed by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). Its full name is Information technology -- Security techniques -- Information security management -- Measurement.

The purpose of ISO/IEC 27004 is to help organizations measure, report and hence systematically improve the effectiveness of their Information Security Management System (ISMS).

The standard includes the following main sections:

  • Information security measurement overview;
  • Management responsibilities;
  • Measures and measurement development;
  • Measurement operation;
  • Data analysis and measurement results reporting;
  • Information Security Measurement Program evaluation and improvement.

Annex A provides a template with which to describe a measure, while Annex B offers some worked examples.

The standard was published on December 7, 2009.[1]

It is currently being revised.

See also

References

External links

  • ISO Website
  • Opensource software to support ISO 27004 measurement program
This article was sourced from Creative Commons Attribution-ShareAlike License; additional terms may apply. World Heritage Encyclopedia content is assembled from numerous content providers, Open Access Publishing, and in compliance with The Fair Access to Science and Technology Research Act (FASTR), Wikimedia Foundation, Inc., Public Library of Science, The Encyclopedia of Life, Open Book Publishers (OBP), PubMed, U.S. National Library of Medicine, National Center for Biotechnology Information, U.S. National Library of Medicine, National Institutes of Health (NIH), U.S. Department of Health & Human Services, and USA.gov, which sources content from all federal, state, local, tribal, and territorial government publication portals (.gov, .mil, .edu). Funding for USA.gov and content contributors is made possible from the U.S. Congress, E-Government Act of 2002.
 
Crowd sourced content that is contributed to World Heritage Encyclopedia is peer reviewed and edited by our editorial staff to ensure quality scholarly research articles.
 
By using this site, you agree to the Terms of Use and Privacy Policy. World Heritage Encyclopedia™ is a registered trademark of the World Public Library Association, a non-profit organization.
 



Copyright © World Library Foundation. All rights reserved. eBooks from World eBook Library are sponsored by the World Library Foundation,
a 501c(4) Member's Support Non-Profit Organization, and is NOT affiliated with any governmental agency or department.