Abstract

Adopts ISO/IEC 27004:2016 to provide guidelines intended to assist organizations in evaluating
the information security performance and the effectiveness of an information security
management system in order to fulfil the requirements of ISO/IEC 27001:2013, 9.1.

Scope

This document provides guidelines intended to assist organizations in evaluating the information security performance and the effectiveness of an information security management system in order to fulfil the requirements of ISO/IEC 27001:2013, 9.1. It establishes:
a) the monitoring and measurement of information security performance;
b) the monitoring and measurement of the effectiveness of an information security management system (ISMS) including its processes and controls;
c) the analysis and evaluation of the results of monitoring and measurement.
This document is applicable to all types and sizes of organizations.

General Product Information

Published
Document Type	Standard
Status	Current
Publisher	Standards Australia
Pages
ISBN
Committee	IT-012
Supersedes	DR AS ISO/IEC 27004:2017