From the course: Security Testing Essential Training

Unlock the full course today

Join today to access over 24,200 courses taught by industry experts.

NIST and ISO

NIST and ISO

From the course: Security Testing Essential Training

Start my 1-month free trial Buy for my team

NIST and ISO

“

- [Instructor] The International Organization for Standardization, or ISO, develops and publishes international standards for everything ranging from quality management and quality assurance to information security management. More to the point, the ISO 27000 family contains 45 separate standards and counting to help organizations select and implement information security controls. While ISO 27001 gets all the glory, it's really ISO 27002 that you should dig into. The latest version of this standard identifies 93 specific security controls grouped into 14 different domains and those domains are further divided into four themes: organizational, physical, people, and technological. As an example information security policies is one control domain and within that domain, ISO provides specific guidance around the policy documentation and the processes to support that documentation that are necessary for an effective…

Contents