Table of Contents

Foreword<br>Introduction<br>1 Scope<br>2 Normative references<br>3 Terms and definitions<br>4 Structure and overview<br>5 Rationale<br>6 Characteristics<br>7 Types of measures<br>8 Processes<br>Annex A (informative) - An information security measurement model<br>Annex B (informative) - Measurement construct examples<br>Annex C (informative) - An example of free-text form<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;measurement construction<br>Bibliography

Abstract

Gives guidelines intended to assist organizations in evaluating the information security performance and the effectiveness of an information security management system in order to fulfil the requirements of ISO/IEC 27001:2013, 9.1.

General Product Information

Published
Document Type	Standard
Status	Current
Publisher	British Standards Institution
Pages
ISBN
Committee	IST/33/1
Supersedes	08/30134763 DC : DRAFT JUNE 2008 16/30286027 DC : 0