+91 80984 42953 hello@sascert.in
Verify a certificate ISO standards library Download brochure
ISO/IEC 27004:2016Published

Information technology — Security techniques — Information security management — Monitoring, measurement, analysis and evaluation

Technologies de l'information — Techniques de sécurité — Management de la sécurité de l'information — Surveillance, mesurage, analyse et évaluation

A new edition is under development: ISO/IEC DIS 27004.

Abstract / scope

ISO/IEC 27004:2016 provides guidelines intended to assist organizations in evaluating the information security performance and the effectiveness of an information security management system in order to fulfil the requirements of ISO/IEC 27001:2013, 9.1. It establishes:

a) the monitoring and measurement of information security performance;

b) the monitoring and measurement of the effectiveness of an information security management system (ISMS) including its processes and controls;

c) the analysis and evaluation of the results of monitoring and measurement.

ISO/IEC 27004:2016 is applicable to all types and sizes of organizations.

Life cycle

Replaces

ISO/IEC 27004:2009WithdrawnInformation technology — Security techniques — Information security management — MeasurementInternational Standard · Published 7 Dec 2009 · ISO/IEC JTC 1/SC 27

Replaced by

ISO/IEC DIS 27004Under developmentInformation security, cybersecurity and privacy protection — Information security management — Monitoring, measurement, analysis and evaluationInternational Standard · ISO/IEC JTC 1/SC 27