+91 80984 42953 hello@sascert.in
Verify a certificate ISO standards library Download brochure
ISO/IEC 27001:2013Withdrawn

Information technology — Security techniques — Information security management systems — Requirements

Technologies de l'information — Techniques de sécurité — Systèmes de management de la sécurité de l'information — Exigences

This edition has been replaced by ISO/IEC 27001:2022.

Need ISO 27001 certification?

We handle documents, training and the accredited audit — fixed price.

See our ISO 27001 service Get a free quote

Abstract / scope

ISO/IEC 27001:2013 specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system within the context of the organization. It also includes requirements for the assessment and treatment of information security risks tailored to the needs of the organization. The requirements set out in ISO/IEC 27001:2013 are generic and are intended to be applicable to all organizations, regardless of type, size or nature.

Life cycle

Amendments & corrigenda

ISO/IEC 27001:2013/Cor 1:2014WithdrawnInformation technology — Security techniques — Information security management systems — Requirements — Technical Corrigendum 1International Standard · Published 18 Sep 2014 · ISO/IEC JTC 1/SC 27ISO/IEC 27001:2013/Cor 2:2015WithdrawnInformation technology — Security techniques — Information security management systems — Requirements — Technical Corrigendum 2International Standard · Published 12 Nov 2015 · ISO/IEC JTC 1/SC 27

Replaces

ISO/IEC 27001:2005WithdrawnInformation technology — Security techniques — Information security management systems — RequirementsInternational Standard · Published 14 Oct 2005 · ISO/IEC JTC 1/SC 27

Replaced by

ISO/IEC 27001:2022PublishedInformation security, cybersecurity and privacy protection — Information security management systems — RequirementsInternational Standard · Published 25 Oct 2022 · ISO/IEC JTC 1/SC 27