Assessment # 1- Information Assurance and Security 1

It is a series of international standards developed by the International Organization for Standardization (ISO) that focus on information security management systems (ISMS) and address various aspects of information security

• ISO 27000 to ISO 27036

• ISO 27001: Information Security Management Systems - Requirements

• ISO 27002: Code of Practice for Information Security Controls

• ISO 27003: Information Security Management System Implementation Guidance

This is the core standard for establishing, implementing, maintaining, and continuously improving an ISMS within an organization.

• ISO 27000 to ISO 27036

• ISO 27001: Information Security Management Systems - Requirements

• ISO 27002: Code of Practice for Information Security Controls

• ISO 27003: Information Security Management System Implementation Guidance

1. It covers various areas of information security, including organizational security, asset management, human resource security, physical and environmental security, and more.

• ISO 27000 to ISO 27036

• ISO 27001: Information Security Management Systems - Requirements

• ISO 27002: Code of Practice for Information Security Controls

• ISO 27003: Information Security Management System Implementation Guidance

1. It provides practical advice on the various phases of ISMS implementation, including planning, establishing, operating, monitoring, reviewing, maintaining, and improving the system.

• ISO 27000 to ISO 27036

• ISO 27001: Information Security Management Systems - Requirements

• ISO 27002: Code of Practice for Information Security Controls

• ISO 27003: Information Security Management System Implementation Guidance

It provides guidance on defining metrics, establishing measurement processes, and reporting on the status and performance of the ISMS.

• 1. ISO 27004: Information Security Management - Measurement

• ISO 27001: Information Security Management Systems - Requirements

• ISO 27002: Code of Practice for Information Security Controls

• ISO 27003: Information Security Management System Implementation Guidance

1. It provides guidance on how to identify, assess, and treat information security risks within the context of an organization's overall risk management framework.

• 1. ISO 27004: Information Security Management - Measurement

• ISO 27005: Information Security Risk Management:

• ISO 27002: Code of Practice for Information Security Controls

• ISO 27003: Information Security Management System Implementation Guidance

1. This standard sets out the requirements for bodies providing certification of an organization's compliance with ISO 27001.

• 1. ISO 27004: Information Security Management - Measurement

• ISO 27005: Information Security Risk Management:

• ISO 27002: Code of Practice for Information Security Controls

• ISO 27006: Requirements for the Accreditation of Certification Bodies:

1. It outlines the principles and processes of auditing and provides recommendations for audit programs and the competence of auditors.

• 1. ISO 27007: Guidelines for Information Security Management Systems Auditing

• ISO 27005: Information Security Risk Management:

• ISO 27002: Code of Practice for Information Security Controls

• ISO 27006: Requirements for the Accreditation of Certification Bodies:

1. This standard offers specific guidance for cloud service providers and cloud customers on implementing information security controls within cloud computing environments.

• 1. ISO 27007: Guidelines for Information Security Management Systems Auditing

• ISO 27005: Information Security Risk Management:

• ISO 27017: Code of Practice for Information Security Controls for Cloud Services

• ISO 27006: Requirements for the Accreditation of Certification Bodies:

1. It provides guidelines for cloud service providers in handling PII and gives customers assurance about the protection of their personal data.

• 1. ISO 27007: Guidelines for Information Security Management Systems Auditing

• ISO 27018: Code of Practice for Protection of Personally Identifiable Information (PII) in Public Clouds:

• ISO 27017: Code of Practice for Information Security Controls for Cloud Services

• ISO 27006: Requirements for the Accreditation of Certification Bodies: