Developed by: International Organization for Standardization (ISO) and International Electrotechnical Commission (IEC).
Focus: Information Security Management System (ISMS).
Key Components
Information Security Management System (ISMS).
Annex A: Control Objectives and Controls(114 controls grouped into 14 control categories.)
Risk Management Process.
The Plan-Do-Check-Act (PDCA) Model.
Documentation Requirements.
Certification Process.
#cybersecurity #iso27001 #grc #riskmanagment #nistframework