NIST SP 800

Although ISO 27001, an international standard for information security management, provides control objectives and controls that cover a wide range of security issues, they are not exhaustive. Thus, ISO 27001 clauses 6.1.3 b) and c) note that an organization can go beyond the standard’s controls to set proper security levels, by ...

The post How to use the NIST SP800 series of standards for ISO 27001 implementation appeared first on 27001Academy.

Although ISO 27001, an international standard for information security management, provides control objectives and controls that cover a wide range of security issues, they are not exhaustive. Thus, ISO 27001 clauses 6.1.3 b) and c) note that an organization can go beyond the standard’s controls to set proper security levels, by ...

The post How to use the NIST SP800 series of standards for ISO 27001 implementation appeared first on 27001Academy.