Governance Compliance

ISO/IEC 27001 Information Security Management

International Organization for StandardizationVersion 2022Active

ISO/IEC 27001 is an international standard that specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system within the context of the organization.

Industries

Financial ServicesHealthcareGovernmentManufacturing

Framework Structure

Domains4
Controls93

Implementation

Timeframe12-24 months
Effortvery-high

Related Frameworks

Other governance compliance frameworks you might find useful.