Project Overview

INCITS/ISO/IEC 27004:2016[2019]: Information technology -- Security techniques -- Information security management -- Monitoring, measurement, analysis and evaluation (Inactive)

page=project_overview&type=project

Start: 2018-10-24 Completed: 2019-10-24

100% Complete

Share |

Title of Standard:: Information technology -- Security techniques -- Information security management -- Monitoring, measurement, analysis and evaluation

Scope Summary:: Provides guidelines intended to assist organizations in evaluating the information security performance and the effectiveness of an information security management system in order to fulfil the requirements of ISO/IEC 27001:2013, 9.1. It establishes: a) the monitoring and measurement of information security performance; b) the monitoring and measurement of the effectiveness of an information security management system (ISMS) including its processes and controls; c) the analysis and evaluation of the results of monitoring and measurement. ISO/IEC 27004:2016 is applicable to all types and sizes of organizations.

Patent Policy Information:: INCITS subscribes to the ANSI Patent Policy when developing American National Standards. INCITS encourages disclosure, where possible, of the existence of pending U.S. patent applications relating to the standard under development, and of any relevant unexpired foreign patents. If such notice is received, INCITS seeks a statement that the patent holder will comply with the ANSI Patent Policy. To download the patent declaration form and for additional information, see https://www.incits.org/standards-information/legal-info.