Standard

ISO/IEC 27004:2016

Historical draft

Note: This standard has a new edition: ISO/IEC 27004:2016

Corrigendums and amendments are bought separately.

Language
Services

Abstract

ISO/IEC 27004:2016 provides guidelines intended to assist organizations in evaluating the information security performance and the effectiveness of an information security management system in order to fulfil the requirements of ISO/IEC 27001:2013, 9.1. It establishes: a) the monitoring and measurement of information security performance; b) the monitoring and measurement of the effectiveness of an information security management system (ISMS) including its processes and controls; c) the analysis and evaluation of the results of monitoring and measurement. ISO/IEC 27004:2016 is applicable to all types and sizes of organizations.

Document information

  • Standard from ISO
  • Published:
  • Edition: 2
  • Version: 1
  • Document type: IS
  • Pages
  • ICS 35.030
  • ISO TC ISO/IEC JTC 1/SC 27

Product Relations

Product life cycle