CEI UNI EN ISO/IEC 27002:2023
Current
Current
The latest, up-to-date edition.
Information security, cybersecurity and privacy protection - Information security controls
Available format(s)
Hardcopy , PDF
Language(s)
Italian
Published date
01-04-2023
Publisher
€330.75
Excluding VAT
| Committee |
CT 700
|
| DocumentType |
Standard
|
| Pages |
156
|
| ProductNote |
This standard also identical to EN ISO/IEC 27002:2022-11
|
| PublisherName |
Comitato Elettrotecnico Italiano
|
| Status |
Current
|
| Supersedes |
Questo documento fornisce un insieme di controlli generici di riferimento per la sicurezza delle informazioni, comprensivi di linee guida per la loro implementazione.
| Standards | Relationship |
| ISO/IEC 27002:2022 | Identical |
| EN ISO/IEC 27002:2017 | Identical |
| ISO/IEC 27555:2021 | Information security, cybersecurity and privacy protection — Guidelines on personally identifiable information deletion |
| ISO 22313:2020 | Security and resilience — Business continuity management systems — Guidance on the use of ISO 22301 |
| ISO/IEC 27001:2013 | Information technology — Security techniques — Information security management systems — Requirements |
| ISO/IEC 29147:2014 | Information technology — Security techniques — Vulnerability disclosure |
| ISO/IEC 27017:2015 | Information technology — Security techniques — Code of practice for information security controls based on ISO/IEC 27002 for cloud services |
| ISO 22301:2019 | Security and resilience — Business continuity management systems — Requirements |
| ISO/IEC 30111:2019 | Information technology — Security techniques — Vulnerability handling processes |
| ISO/IEC 27031:2011 | Information technology — Security techniques — Guidelines for information and communication technology readiness for business continuity |
| ISO/IEC 15408-5:2022 | Information security, cybersecurity and privacy protection — Evaluation criteria for IT security — Part 5: Pre-defined packages of security requirements |
| ISO 21500:2021 | Project, programme and portfolio management — Context and concepts |
| ISO/IEC 24760-3:2016 | Information technology — Security techniques — A framework for identity management — Part 3: Practice |
| ISO/IEC 27018:2019 | Information technology — Security techniques — Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors |
| ISO 55001:2014 | Asset management — Management systems — Requirements |
| ISO/IEC 27011:2016 | Information technology — Security techniques — Code of practice for Information security controls based on ISO/IEC 27002 for telecommunications organizations |
| ISO/TS 22317:2021 | Security and resilience — Business continuity management systems — Guidelines for business impact analysis |
| ISO/IEC 27007:2020 | Information security, cybersecurity and privacy protection — Guidelines for information security management systems auditing |
| ISO/IEC 27701:2019 | Security techniques — Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management — Requirements and guidelines |
| ISO 9000:2015 | Quality management systems — Fundamentals and vocabulary |
| ISO 21502:2020 | Project, programme and portfolio management — Guidance on project management |
| ISO/IEC 27005:2022 | Information security, cybersecurity and privacy protection — Guidance on managing information security risks |
| ISO 15489-1:2016 | Information and documentation — Records management — Part 1: Concepts and principles |
| ISO/IEC 17788:2014 | Information technology — Cloud computing — Overview and vocabulary |
| ISO 27799:2016 | Health informatics — Information security management in health using ISO/IEC 27002 |
| ISO 31000:2018 | Risk management — Guidelines |
Summarise
Access your standards online with a subscription
-
Simple online access to standards, technical information and regulations.
-
Critical updates of standards and customisable alerts and notifications.
-
Multi-user online standards collection: secure, flexible and cost effective.