ISO 27001 is the international standard for information security. Its framework requires organizations to identify information security risks and select appropriate controls to tackle them. Those practices are outlined in Annex A of ISO 27001, which contains 114 controls divided into 14 domains
Information security policies | Organization of information security |
Human resource security | Asset management |
Access control | Cryptography |
Physical and environmental security | Operations security |
Operations security | System acquisition, development and maintenance |
Supplier relationships | Information security incident management |
Information security aspects of business continuity management | Compliance |
Subscribe to get your copy of checklist etc