ISO/IEC 27014 2013 Standard

Description

ISO/IEC 27014:2013 (Information technology – Security techniques – Governance of information security) provides guidance on information security governance principles which is suitable for organisations of all types and sizes.

Using ISO27014 promotes strategic alignment between information security and company strategy, allowing an organisation to evaluate, direct, monitor and effectively communicate its information security-related activities. This in turn will allow an organisation to:

• Invest in information security in a more focused and effective manner
• Deliver business value to stakeholders
• Promote board-level oversight of information security
• Ensure effective management of risk
• Achieve compliance with regulatory or contractual requirements.

Contents

• Summary
• Foreword
• 1 Scope
• 2 Normative references
• 3 Definitions
• 4 Concepts
• 4.1 General
• 4.2 Objectives
• 4.3 Desired outcomes
• 4.4 Relationship
• 5 Principles and processes
• 5.1 Overview
• 5.2 Principles
• 5.3 Processes
• 5.3.1 Overview
• 5.3.2 Evaluate
• 5.3.3 Direct
• 5.3.4 Monitor
• 5.3.5 Communicate
• 5.3.6 Assure
• Annex A: An example of information security status
• Annex B: An example of detailed information security status
• Bibliography

Please note: We supply the British international adoptions of ISO27014, which all contain exactly the same content, interchangeably.

Purchase and use of the PDF version of this product is subject to this EULA.

Customer Reviews