ISO 27002 Information Security Standard
ISO 27002:2013 Standard
Information Security
What is ISO 27002:2013?
ISO 27001 suppliments ISO 27001 (The Information Security Management System or ISMS) by providing a list of common operational and technical information security controls.
ISO 27001 provides the overarching governance or management solution.
ISO 27002 focuses on the actual controls.
What is in ISO 27003:2013?
ISO 27003:2013 includes:
- Information security policies
- Organization of information security
- Human resource security
- Asset management
- Access control
- Cryptography
- Physical and environmental security
- Operations security
- Communications security
- System acquisition, development and maintenance
- Supplier relationships
- Information security incident management
- Information security aspects of business continuity management
- Compliance
How to use ISO 27003:2013?
ISO 27003:2013 links to the ISO 27001:2013 Statement of Applicability, which lists which of the controls are to be used or not used by the organisation.
ISO 27003:2013 also provides additional detail for each control, to help delivery and assurance activities.
We can help you make use of ISO 27003:2013 to help your business.
To find out more, simply send us a message:
GDPR Specialist Online Advisory Support
Do you need some immediate support for GDPR compliance or information security?
Book an advisory call with a senior GDPR consultant from Data GRC.
You’ll receive a 30 minute call (Teams/Zoom) with our senior GDPR subject matter specialist.
Expert advice for only £175 + VAT (£210), payable by credit card or bank transfer.
Stripe Buy Button
GDPR Advisory call (30 mins)
£210
Buy
Supported payment methods: