iso 27002 it asset inventory checklist 27001

This group includes ISO/IEC 27002 (former 17799:2005 standard), an international standard setting out best practice code to support the implementation of the Information Security Management System (ISMS) in organizations.īy providing a complete implementation guide, it describes how controls can be established. In 1995, the international organizations ISO (The International Organization for Standardization) and IEC (International Electrotechnical Commission) gave rise to a group of standards that consolidate the guidelines related to the scope of Information Security, represented by the 27000 series. Next, know the main characteristics of the standard, as well as the benefits associated with its implementation: What is ISO 27002? Nowadays it is fundamental for the consolidation of an Information Security Management System (ISMS), guaranteeing the continuity and keeping of security processes, aligned with the strategic goals of the organization.

The increase in the number of occurrences has been influencing the perception of value on investments in IS, and causes companies to seek the structuring of processes to ensure that their business is protected against the most varied types of virtual threats.Īmid this scenario, the international standard ISO/IEC 27002 has emerged, focusing on good practices for the management of information security. The disturbances generated by these incidents are diverse, generating from damage to the business image to leakage of critical information, which can lead to substantial financial losses. In contrast, it is important to emphasize that the popularization of the term Information Security (sometimes shortened to InfoSec or IS) was motivated by the increase in the number of security incidents occurring worldwide.

Information security is a subject that has gained prominence in recent years, obtaining space in the media and becoming a commodity in companies of the most varied sizes and segments.

Iso 27002 it asset inventory checklist 27001