5. ISO 27002 standard

This standard is not a requirement standard, and therefore does not have to be met in order to be certified. It is a guide standard. Its role is to help understand the normative requirements and to facilitate the implementation of ISMS.

This standard contains four sections on safety measures:

• organizational safety measures ;

• safety measures applicable to persons ;

• physical safety measures ;

• technological safety measures.

And two informative appendices:

• appendix A: using attributes ;

• annex B: correspondence with ISO/IEC 27002: 2013.

Articles are broken down into safety...