NF EN ISO/IEC 27001

NF EN ISO/IEC 27001

May 2017
Standard Cancelled
  • Free consultation sponsored by ANS (Digital Health Agency)

Information technology - Security techniques - Information security management systems - Requirements

ISO/IEC 27001:2013 specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system within the context of the organization. It also includes requirements for the assessment and treatment of information security risks tailored to the needs of the organization. The requirements set out in ISO/IEC 27001:2013 are generic and are intended to be applicable to all organizations, regardless of type, size or nature.

See more
View the extract
Document attached to the standard

One or more files are associated with this standard. After your purchase, you will find it (them) directly from your customer area, in the same place as the standard.

Main informations

Collections

National standards and national normative documents

Publication date

May 2017

Number of pages

40 p.

Reference

NF EN ISO/IEC 27001

ICS Codes

03.100.70   Management systems
35.030   IT Security

Classification index

Z74-221

Print number

1

International kinship

ISO/IEC 27001:2013

European kinship

EN ISO/IEC 27001:2017
Sumary
Information technology - Security techniques - Information security management systems - Requirements

ISO/IEC 27001:2013 specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system within the context of the organization. It also includes requirements for the assessment and treatment of information security risks tailored to the needs of the organization. The requirements set out in ISO/IEC 27001:2013 are generic and are intended to be applicable to all organizations, regardless of type, size or nature.

Replaced standards (1)
NF ISO/IEC 27001
December 2013
Standard Cancelled
Information technology - Security techniques - Information security management systems - Requirements

ISO/IEC 27001:2013 specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system within the context of the organization. It also includes requirements for the assessment and treatment of information security risks tailored to the needs of the organization. The requirements set out in ISO/IEC 27001:2013 are generic and are intended to be applicable to all organizations, regardless of type, size or nature.

Standard replaced by (1)
NF EN ISO/IEC 27001
July 2023
Standard Current
Information security, cybersecurity and privacy protection - Information security management systems - Requirements

This document specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system within the context of the organization. This document also includes requirements for the assessment and treatment of information security risks tailored to the needs of the organization. The requirements set out in this document are generic and are intended to be applicable to all organizations, regardless of type, size or nature. Excluding any of the requirements specified in Clauses 4 to 10 is not acceptable when an organization claims conformity to this document.

Table of contents
  • Avant-propos
  • 1 Domaine d'application
  • 2 Références normatives
  • 3 Termes et définitions
  • 0 Introduction
  • 4 Contexte de l'organisation
  • 5 Leadership
  • 6 Planification
  • 7 Support
  • 8 Fonctionnement
  • 9 Évaluation des performances
  • 10 Amélioration
  • Annexe A (normative) Objectifs et mesures de référence
  • Annexe RECTIFICATIF TECHNIQUE
    1
  • Annexe RECTIFICATIF TECHNIQUE
    1
  • Annexe RECTIFICATIF TECHNIQUE
    2
  • Annexe RECTIFICATIF TECHNIQUE
    2
  • Bibliographie
ZOOM ON ... the Requirements department
To comply with a standard, you need to quickly understand its issues in order to determine its impact on your activity.

The Requirements department helps you quickly locate within the normative text:
- mandatory clauses to satisfy,
- non-essential but useful clauses to know, such as permissions and recommendations.

The identification of these types of clauses is based on the document “ISO / IEC Directives, Part 2 - Principles and rules of structure and drafting of ISO documents ”as well as on a constantly enriched list of verbal forms.

With Requirements, quickly access the main part of the normative text!

With Requirements, quickly access the main part of the normative text!
New: UPSELL service
- The UPSELL service allows you to easily update one of your standards.
- With a single click, add a new language, the Requirements or Redline+ service and add one or more additional users.
- Whether you are in the process of acquiring a standard or it is already available in your personal space, the UPSELL service is available at every stage to help you understand it and implement it within your organization.
Need to identify, monitor and decipher standards?

COBAZ is the simple and effective solution to meet the normative needs related to your activity, in France and abroad.

Available by subscription, CObaz is THE modular solution to compose according to your needs today and tomorrow. Quickly discover CObaz!

Request your free, no-obligation live demo

I discover COBAZ