Table of Contents

Foreword<br>Introduction<br>1 Scope<br>2 Normative references<br>3 Terms and definitions<br>4 Structure and overview<br>5 Rationale<br>6 Characteristics<br>7 Types of measures<br>8 Processes<br>Annex A (informative) - An information security <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;measurement model<br>Annex B (informative) - Measurement construct <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;examples<br>Annex C (informative) - An example of free-text <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;form measurement construction<br>Bibliography

Abstract

Specifies guidelines intended to assist organizations in evaluating the information security performance and the effectiveness of an information security management system in order to fulfill the requirements of ISO/IEC 27001:2013.

General Product Information

Published
Document Type	Standard
Status	Current
Publisher	Canadian Standards Association
Pages
ISBN