120k views
4 votes
What International Organization for Standardization (ISO) standard applies to information security management controls?

1 Answer

4 votes

Final answer:

ISO/IEC 27001 is the ISO standard for information security management controls. It is part of the ISO/IEC 27000 series, providing a framework for securing various organizational assets and complying with regulations.

Step-by-step explanation:

The International Organization for Standardization (ISO) standard that applies to information security management controls is ISO/IEC 27001. This standard is part of a larger set that includes ISO/IEC 27000 series, which provides a framework for establishing, implementing, maintaining, and continually improving an information security management system (ISMS).

ISO/IEC 27001 is designed to help organizations manage the security of assets such as financial information, intellectual property, employee details, and information entrusted by third parties.

It is relevant to all sectors, including Human Resources, Institutional & Corporate Management, Equal Opportunity Programs, and Security Management & Safeguards. Additionally, its adoption can help organizations comply with other regulations, such as those in Executive Order No. 14,028 on improving the nation's cybersecurity.

User Dsaydon
by
7.5k points