Skip to content

Glossary: Policies, Standards and Risk Management

ISO/IEC 27001

Also written: ISO 27001, ISO/IEC 27001:2022

The international standard for running an information security program. It is voluntary, lists 93 controls (14 of them physical) and requires an information security policy.

Where the book teaches it

Related terms

ISO/IEC 27002standardinformation security policy