ISO Publications

Question 1

ISO 27001

Answer 1

ISO 27001 is a management system standard and therefore establishes specific requirements in which it can be certified by a third party accredited registrar

Question 2

ISO 27002

Answer 2

ISO 27002 is designed to use as a reference for selecting security controls within the process of implementing an Information Security Management System (ISMS) based on ISO 27001