Most recent
INCITS/ISO/IEC 27004:2016 (R2024)
Information technology - Security techniques - Information security management - Monitoring, measurement, analysis and evaluation (Identical National Adoption of ISO/IEC 27004:2016)
Provides guidelines intended to assist organizations in evaluating the information security performance and the effectiveness of an information security management system in order to fulfil the requirements of ISO/IEC 27001:2013, 9.1. It establishes: (a) the monitoring and measurement of information security performance; (b) the monitoring and measurement of the effectiveness of an information security management system (ISMS) including its processes and controls; and (c) the analysis and evaluation of the results of monitoring and measurement. ISO/IEC 27004:2016 is applicable to all types and sizes of organizations.
- ADD TO ALERT |
- PDF |
InterNational Committee for Information Technology Standards [incits]