CybersecurityStandardIn 6clicks App

ISO/IEC 27001:2022ISO/IEC 27001:2022 - Information security, cybersecurity and privacy protection — Information security management systems — Requirements

ISO/IEC 27001:2022 is an international standard defining requirements for an information security management system (ISMS). It helps organizations establish, implement, maintain, and continually improve their information security processes to manage data-related risks.

ISO/IEC 27001:2022 is the third edition of the standard, published in October 2022, that outlines requirements for managing and protecting information. It enables organizations of any size and sector to develop a holistic approach to information security that addresses people, processes, and technology. The standard supports risk management, ensures data confidentiality, integrity, and availability, and promotes operational resilience to evolving cyber threats. It is widely adopted worldwide, with certification processes available for businesses seeking formal accreditation to demonstrate compliance.
#information security#ISMS#cybersecurity#risk management#data protection

Related in Cybersecurity

CybersecurityStandardIn 6clicks App

OWASP ASVS — OWASP Application Security Verification Standard

The OWASP Application Security Verification Standard (ASVS) is an open standard for testing and verifying the security of web applications. It provides developers with a comprehensive list of requirements for secure development and helps establish confidence in application security.

Issuer
OWASP Foundation
Version
4.0.2
Updated
May 2025
View detailsapplication security · web security
CybersecurityFrameworkIn 6clicks App

CMMC — Cybersecurity Maturity Model Certification

The Cybersecurity Maturity Model Certification (CMMC) Assessment Guide defines how organizations are evaluated for compliance with cybersecurity requirements when working with the U.S. Department of Defense. It outlines assessment methods, evidence expectations, and control validation aligned with standards like NIST SP 800-171. The guide ensures consistent and rigorous verification of an organization’s ability to protect sensitive information.

Issuer
US Government
Jurisdiction
USA
Version
2.13
View detailsinformation security · cybersecurity
CybersecurityFrameworkIn 6clicks App

SOC2 — SOC2 Trusted Services Criteria

SOC 2 is a framework for managing and reporting on controls at service organizations relevant to security, availability, processing integrity, confidentiality, and privacy. It aims to provide detailed information and assurance to stakeholders about how these controls are implemented to protect user data.

Issuer
American Institute of Certified Public Accountants (AICPA)
Jurisdiction
USA
Updated
Sep 2022
View detailssoc 2 · security