5. ISO 27002 standard

This standard is not a requirement standard, and therefore does not have to be met in order to be certified. It is a guide standard. Its role is to help people understand the normative requirements and to facilitate ISMS implementation.

This standard comprises 14 sections on safety measures, with a total of 35 main safety categories and 114 measures. Each clause defining safety measures contains several safety categories. Each safety category comprises a safety objective (goal to be achieved) and one or more measures to achieve this safety objective.

The description of safety measures is divided into three parts:

• measure, which specifies the appropriate measure for the safety objective ;

• implementation recommendations, which provide detailed information on...