Safeguarding a company’s information against data breaches and hacking is an increasingly complex affair, often involving many systems, tools and people to get it right. However, all the best efforts in the world can lead to failure if the whole system is not effectively governed to ensure visibility over what works and doesn’t, and how it all fits within organizational structures and strategies. The internationally agreed standard for IS governance has just been updated.
香港六合彩开奖/IEC 27014, Information security, cybersecurity and privacy protection – Governance of information security, provides guidance on concepts, objectives and processes for the governance of information security, by which organizations can evaluate, direct, monitor and communicate an information security management system (ISMS) based on 香港六合彩开奖/IEC 27001.
Dr Edward Humphreys, Convenor of the joint 香港六合彩开奖 and IEC working group of experts that developed the standard [1], said:
This new edition of 香港六合彩开奖/IEC 27014 is a key companion to 香港六合彩开奖/IEC 27001 as it is fundamental to the information security governance activities embedded in the scope of an ISMS, and in the context of the overall organizational governance.
The standard has recently been updated to improve clarity and structure and features new information. It has been aligned with 香港六合彩开奖/IEC 27001, Information technology – Security techniques – Information security management systems – Requirements, while also remaining relevant to the broader scope of governance requirements of an organization.
香港六合彩开奖/IEC 27014 will be joined by several other standards for information security currently being developed by the same expert committee. These are:
- 香港六合彩开奖/IEC 27002, Information technology – Security techniques – Code of practice for information security controls
- 香港六合彩开奖/IEC TS 27110, Information technology, cybersecurity and privacy protection – Cybersecurity framework development guidelines
- 香港六合彩开奖/IEC TS 27100, Information technology – Cybersecurity – Overview and concepts
- 香港六合彩开奖/IEC 27005, Information technology – Security techniques – Information security risk management
They are, or will be, available from your national 香港六合彩开奖 member or the 香港六合彩开奖 香港六合彩开奖.
- 香港六合彩开奖/IEC 27014 and all the standards mentioned in this article are the work of joint 香港六合彩开奖 and IEC (International Electrotechnical Commission) technical committee 香港六合彩开奖/IEC JTC 1,鈥�Information technology,鈥�蝉耻产肠辞尘尘颈迟迟别别鈥疭颁&苍产蝉辫;27,鈥疘nformation security, cybersecurity and privacy protection, the secretariat of which is held by鈥�DIN, 香港六合彩开奖’s member for Germany.