Customer Service:
Mon - Fri: 8:30 am - 6 pm EST

 Most recent

ISO/IEC 27014:2020

Information security, cybersecurity and privacy protection - Governance of information security

This document provides guidance on concepts, objectives and processes for the governance of information security, by which organizations can evaluate, direct, monitor and communicate the information security-related processes within the organization.

The intended audience for this document is:

— governing body and top management;

— those who are responsible for evaluating, directing and monitoring an information security management system (ISMS) based on ISO/IEC 27001;

— those responsible for information security management that takes place outside the scope of an ISMS based on ISO/IEC 27001, but within the scope of governance.

This document is applicable to all types and sizes of organizations.

All references to an ISMS in this document apply to an ISMS based on ISO/IEC 27001.

This document focuses on the three types of ISMS organizations given in Annex B. However, this document can also be used by other types of organizations.


Content Provider
International Organization for Standardization [iso]


Others Also Bought

ISO/IEC 27000 Information Technology Security Techniques Collection
ISO/IEC 27000, ISO/IEC 27001, ISO/IEC 27002, ISO/IEC 27003, ISO/IEC 27004, ISO/IEC 27005, ISO/IEC 27006, ISO/IEC ...
ISO 27799:2016
Health informatics - Information security management in health using ISO/IEC 27002
ISO/IEC 27017:2015
Information technology - Security techniques - Code of practice for information security controls based on ISO/IEC ...
ANSI Logo

As the voice of the U.S. standards and conformity assessment system, the American National Standards Institute (ANSI) empowers its members and constituents to strengthen the U.S. marketplace position in the global economy while helping to assure the safety and health of consumers and the protection of the environment.

CUSTOMER SERVICE
NEW YORK OFFICE
ANSI HEADQUARTERS