BS ISO/IEC 27004:2016

Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Structure and overview
5 Rationale
6 Characteristics
7 Types of measures
8 Processes
Annex A (informative) - An information security measurement model
Annex B (informative) - Measurement construct examples
Annex C (informative) - An example of free-text form
        measurement construction
Bibliography

Gives guidelines intended to assist organizations in evaluating the information security performance and the effectiveness of an information security management system in order to fulfil the requirements of ISO/IEC 27001:2013, 9.1.

This document provides guidelines intended to assist organizations in evaluating the information security performance and the effectiveness of an information security management system in order to fulfil the requirements of ISO/IEC27001:2013, 9.1. It establishes: the monitoring and measurement of information security performance; the monitoring and measurement of the effectiveness of an information security management system (ISMS) including its processes and controls; the analysis and evaluation of the results of monitoring and measurement. This document is applicable to all types and sizes of organizations.