Codes & Standards - Purchase
CAN/CSA-ISO/IEC 27004-10 (R2015)
Information technology - Security techniques - Information security management - Measurement (Adopted ISO/IEC 27004:2009, first edition, 2009-12-15)
SKU: 2420891
Published by CSA Group
Publication Year 2010
Reaffirmed in 2015
01 Edition
76 pages
Withdrawn
Product Details
Standards development within the Information Technology sector is harmonized with international standards development. Through the CSA Technical Committee on Information Technology (TCIT), Canadians serve as the Canadian Advisory Committee (CAC) on ISO/IEC Joint Technical Committee 1 on Information Technology (ISO/IEC JTC1) for the Standards Council of Canada (SCC), the ISO member body for Canada and sponsor of the Canadian National Committee of the IEC. Also, as a member of the International Telecommunication Union (ITU), Canada participates in the International Telegraph and Telephone Consultative Committee (ITU-T).
At the time of publication, ISO/IEC 27004:2009 is available from ISO and IEC in English only. CSA will publish the French version when it becomes available from ISO and IEC.
Scope
This International Standard provides guidance on the development and use of measures and measurement in order to assess the effectiveness of an implemented information security management system (ISMS) and controls or groups of controls, as specified in ISO/IEC 27001.
This International Standard is applicable to all types and sizes of organization.
NOTE This document uses the verbal forms for the expression of provisions (e.g. shall, shall not, should, should not, may, need not, can and cannot) that are specified in the ISO/IEC Directives, Part 2, 2004, Annex H. See also ISO/IEC 27000:2009, Annex A.
At the time of publication, ISO/IEC 27004:2009 is available from ISO and IEC in English only. CSA will publish the French version when it becomes available from ISO and IEC.
Scope
This International Standard provides guidance on the development and use of measures and measurement in order to assess the effectiveness of an implemented information security management system (ISMS) and controls or groups of controls, as specified in ISO/IEC 27001.
This International Standard is applicable to all types and sizes of organization.
NOTE This document uses the verbal forms for the expression of provisions (e.g. shall, shall not, should, should not, may, need not, can and cannot) that are specified in the ISO/IEC Directives, Part 2, 2004, Annex H. See also ISO/IEC 27000:2009, Annex A.
Request Copyright Permissions
To order this product please contact us
GST REG No R119441681
QST REG No R1006017360
