3. Identify ISO standards related to cyber security (AC 2.1)

There's quite a good number of ISO(International Organisation for Standarization) standards related to cyber security. Most of them fall under the 27000 series. They are all jointly published by the International Electrotechnical Commission(IEC) Here are some that I found interesting: ISO/IEC 27001:2022 - Information security, cybersecurity and privacy protection - Information Security Management Systems (ISMS) - Requirements ISO/IEC 27002:2022 - Information Security controls - a generic selection of 'good practice' information security controls ISO/IEC 27005:2022 Guidance on managing information security risks ISO/IEC 27017:2015 - Code of practice for information security controls based on ISO/IEC27002 for cloud services ISO/IEC 27032:2023 - Guidelines for Internet Security - "protecting Internet-related services and related ICT systems and networks as an extension of network security" ISO/IEC 27033:2023 - Network Security - Explains how organisation can "achieve quality network technical security architectures, designs and implementation that will ensure network security appropriate to their business environments" ISO/IEC 27039:2015 - Intrusion prevention - provides guidelines to assist organisation in preparing to deploy Intrusion Detection Prevention System (IDPS)

Last updated