ISO/IEC 27004:2009Withdrawn

Information technology — Security techniques — Information security management — Measurement

Technologies de l'information — Techniques de sécurité — Management de la sécurité de l'information — Mesurage

This edition has been replaced by ISO/IEC 27004:2016.

Abstract / scope

ISO/IEC 27004:2009 provides guidance on the development and use of measures and measurement in order to assess the effectiveness of an implemented information security management system (ISMS) and controls or groups of controls, as specified in ISO/IEC 27001.

ISO/IEC 27004:2009 is applicable to all types and sizes of organization.

Life cycle

Replaced by

ISO/IEC 27004:2016PublishedInformation technology — Security techniques — Information security management — Monitoring, measurement, analysis and evaluationInternational Standard · Published 15 Dec 2016 · ISO/IEC JTC 1/SC 27