CybersecurityStandardIn 6clicks App

ISO/IEC 27001:2013 — ISO/IEC 27001:2013 - Information technology — Security techniques — Information security management systems — Requirements

ISO/IEC 27001:2013 specifies the requirements for establishing, implementing, maintaining, and continually improving an information security management system (ISMS). It also includes guidelines for assessing and addressing information security risks in organizations.

Talk to a GRC Expert Read source ↗Download document ↗

ISO/IEC 27001:2013 provides a comprehensive framework for creating an ISMS, applicable to organizations of all sizes and types. The standard outlines specific requirements for information security risk assessment as well as methodologies for risk treatment and mitigation. It emphasizes a continual improvement cycle, encouraging organizations to evaluate and enhance their practices over time. This edition was published in 2013 and has since been withdrawn after being replaced by ISO/IEC 27001:2022.

#information security#ISMS#cybersecurity#risk management#data protection

Related in Cybersecurity

CybersecurityStandardIn 6clicks App

OWASP ASVS — OWASP Application Security Verification Standard

The OWASP Application Security Verification Standard (ASVS) is an open standard for testing and verifying the security of web applications. It provides developers with a comprehensive list of requirements for secure development and helps establish confidence in application security.

Issuer: OWASP Foundation
Version: 4.0.2
Updated: May 2025

View detailsapplication security · web security

CybersecurityFrameworkIn 6clicks App

CMMC — Cybersecurity Maturity Model Certification

The Cybersecurity Maturity Model Certification (CMMC) Assessment Guide defines how organizations are evaluated for compliance with cybersecurity requirements when working with the U.S. Department of Defense. It outlines assessment methods, evidence expectations, and control validation aligned with standards like NIST SP 800-171. The guide ensures consistent and rigorous verification of an organization’s ability to protect sensitive information.

Issuer: US Government
Jurisdiction: USA
Version: 2.13

View detailsinformation security · cybersecurity

CybersecurityFrameworkIn 6clicks App

SOC2 — SOC2 Trusted Services Criteria

SOC 2 is a framework for managing and reporting on controls at service organizations relevant to security, availability, processing integrity, confidentiality, and privacy. It aims to provide detailed information and assurance to stakeholders about how these controls are implemented to protect user data.

Issuer: American Institute of Certified Public Accountants (AICPA)
Jurisdiction: USA
Updated: Sep 2022

View detailssoc 2 · security