The Inner Circle

 View Only
Back to discussions
Expand all | Collapse all

ISO/IEC 27014:2020 Information security, cybersecurity and privacy protection - Governance of information security

  • 1.  ISO/IEC 27014:2020 Information security, cybersecurity and privacy protection - Governance of information security

    Posted Jan 04, 2021 02:15:00 AM
      |   view attached
    Hi All,

    ISO/IEC published 27014:2020 Information security, cybersecurity and privacy protection - Governance of information security

    This document provides guidance on concepts, objectives, and processes for the governance of information security, by which organizations can evaluate, direct, monitor, and communicate the information security-related processes within the organization.
    The intended audience for this document is:
    - governing body and top management;
    - those who are responsible for evaluating, directing, and monitoring an information security management system (ISMS) based on ISO/IEC 27001;
    - those responsible for information security management that takes place outside the scope of an ISMS based on ISO/IEC 27001, but within the scope of governance.
    This document is applicable to all types and sizes of organizations.
    All references to an ISMS in this document apply to an ISMS based on ISO/IEC 27001.
    This document focuses on the three types of ISMS organizations given in Annex B. However, this document can also be used by other types of organizations.

    This standard can be purchased at: https://webstore.iec.ch/publication/68287?

    The preview can be found at: https://webstore.iec.ch/preview/info_isoiec27014%7Bed2.0%7Den.pdf






    ------------------------------
    Michael Roza CPA, CISA, CIA, MBA, Exec MBA
    ------------------------------