Information technology -- Security techniques -- Information security management -- Monitoring, measurement, analysis and evaluation
(Not available in French)
ISO/IEC 27004:2016 provides guidelines intended to assist organizations in evaluating the information security performance and the effectiveness of an information security management system in order to fulfil the requirements of ISO/IEC 27001:2013, 9.1. It establishes:
a) the monitoring and measurement of information security performance;
b) the monitoring and measurement of the effectiveness of an information security management system (ISMS) including its processes and controls;
c) the analysis and evaluation of the results of monitoring and measurement.
ISO/IEC 27004:2016 is applicable to all types and sizes of organizations.
Document published on: 2016-12 Edition: 2 (Monolingual) ICS: 03.100.70; 35.030 Status: Published Stage: 60.60 (2016-12-15) TC/SC: ISO/IEC JTC 1/SC 27 Number of Pages: 58
Revises: ISO/IEC 27004:2009
No corrigenda or amendments available