6. Differences between NIS2 and ISO/IEC 27001

ISO/IEC 27001 (2022) is an international standard that defines the requirements for establishing, implementing, maintaining and improving an information security management system (ISMS). It aims to guarantee the confidentiality, integrity and availability of an organization's information, based on 93 audit criteria. It enables organizations not only to demonstrate their commitment to information security, but also to reinforce the confidence of stakeholders, including customers and business partners. Figure 4 lists the ISO 27000 family of standards most widely used in all sectors.