Français
3. ISO 27001 standard
3.1 Context
A first ISO/IEC 17799 document published in 2005 dealt with security techniques – Code of good practice for information security management. These implementation recommendations are included in the normative Annex A of ISO/IEC 27001. The 2013 version includes a major change in requirements.
Main changes in the new version :
The definitions are set out in ISO 27000 ;
two additional requirement chapters: 4 to 10 instead of 4 to 8;
normative Annex A, which adopts a new structure: 14 objective sectors instead of 11, and 114 safety measures instead of 133;
the former...
The Ultimate Scientific and Technical Reference
This article is included in
Software technologies and System architectures
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
ISO 27001 standard
Declaration of applicability
Bibliography
Works
Software tools
Audit diagnostic evaluation system (ADES). This tool manages several reference grids. It enables audit/evaluation findings to be entered into a database, and improvement actions to be recorded. It then reports on the audit/assessment findings recorded in the database. Comparisons between two audits/assessments enable improvements to be assessed. A slideshow presenting the functionalities is available for download at the...
Websites
French Standards Association (AFNOR) http://www.afnor.fr
International Organization for Standardization (ISO) http://www.iso.ch
International Electrotechnical Commission (IEC) http://www.iec.ch
...Standards and norms
International standards on quality management and quality assurance
- Quality management systems – Basic principles and vocabulary - ISO 9000 - 2005
- Quality management systems – Requirements (new version expected in 2015) - ISO 9001 - 2008
- Quality management systems – Performance improvement guidelines - ISO 9004 - 2009
- Environmental management systems – Specifications and...
The Ultimate Scientific and Technical Reference
