ISO 27002 standard
Information security, cybersecurity, and protection of privacy data - ISO/IEC 27001 : 2022

This standard is not a requirement standard, and therefore does not have to be met in order to be certified. It is a guide standard. Its role is to help understand the normative requirements and to facilitate the implementation of ISMS.

This standard contains four sections on safety measures:

• organizational safety measures ;

• safety measures applicable to persons ;

• physical safety measures ;

• technological safety measures.

And two informative appendices:

• appendix A: using attributes ;

• annex B: correspondence with ISO/IEC 27002: 2013.

Articles are broken down into safety...