Yellow font on Black background Black font on White background Black font on Cream background
Call us today 01621 857841 or Email us
Quality Matters Logo
"Quality Matters in your Business"

Monday, 14 October 2013

Information Security Management Standards

The revised Standards are now published.  The revised contents of both ISO 27001:20013 and ISO27002:2013 are shown below:

ISO27001:2013 - Requirements

  1. Scope
  2. Normative references
  3. Terms and definitions
  4. Context of the organization
  5. Leadership
  6. Planning
  7. Support
  8. 8 Operation
  9. Performance evaluation
  10. Improvement

ISO27002:2013 – Code of Practice

  1. Scope
  2. Normative references 
  3. Terms and definitions  
  4. Structure of this standard 
  5. Information security policies
  6. Organization of information security
  7. Human resource security 
  8. Asset management 
  9. Access control 
  10. Cryptography 
  11. Physical and environmental security 
  12. Operations security
  13. Communications security 
  14. System acquisition, development and maintenance 
  15. Supplier relationships 
  16. Information security incident management 
  17. Information security aspects of business continuity management 
  18. Compliance

New registrants can choose to become certificated to the new standard or to the old :2005 standard for a period of time.  Existing certificate holders will have to transition to the new standard during the next twelve months period.

No comments:

Quality Matters

P.O.Box 5479

T: 01621 857841
F: 01621 856016
M: 07702 193788

© 2015 Quality Matters Ltd. All rights reserved. Responsive Design