Tiêu chuẩn quốc tế

• Số hiệu / Standard Number: ANSI INCITS/ISO/IEC 27002:2013
• Năm ban hành / Publication date: 2013
• Tình trạng / Status: A - Còn hiệu lực
• Tên tiếng Anh / Title in English: Information technology - Security techniques - Code of practice for information security controls
• Số trang / Page: 90

Phạm vi áp dụng / Scope of standard

This International Standard gives guidelines for organizational
information security standards and information security management
practices including the selection, implementation and management of
controls taking into consideration the organization's information
security risk environment(s).

This International Standard is designed to be used by
organizations that intend to:

a) select controls within the process of implementing an
Information Security Management System based on ISO/IEC
27001;[10]

b) implement commonly accepted information security
controls;

c) develop their own information security management
guidelines