ISO/IEC 27032 2012 Standard

The ISO/IEC 27032:2012 standard

ISO/IEC 27032:2012 – Information technology – Security techniques – Guidelines for cybersecurity

This standard provides guidance for improving an organisation’s cyber security programme. It addresses the key elements of cyber security and how they can affect other security considerations, including:

• Information security
• Network security
• Internet security
• CIIP (critical information infrastructure protection)

The guidance provided by ISO 27032 supports any information security programme, not just those aligned to ISO 27001. It examines cyber security from a range of perspectives, including those of stakeholders, and provides an overview of controls and frameworks for managing risks in cyberspace.