ISO_IEC_27002-2013.pdf

INTERNATIONALISO/IECSTANDARD27002Second edition2013-10-01Information technology-Securitytechniques-Code of practice forinformation security controlsTechnologies de linformation-Techniques de securite-Code debonne pratique pour le management de la securite de linformationReference numberIS0/1EC27002:2013(E)IsoIECIS0/IEC2013IS0/IEC27002:2013(E)15.2 Supplier service delivery management.6616Information security incident management.6716.1 Management of information security incidents and improvements.6717Information security aspects of business continuity management.7117.1 Information security continuity.7117.2Redundancies.318Compliance7418.1 Compliance with legal and contractual requirements.7418.2 Information security reviews97wISO/IEC 2013-All rights reservedIS0/1EC27002:2013(E)ForewordISO(the International Organization for Standardization)and IEC(the International ElectrotechnicalCommission)form the specialized system for worldwide standardization.National bodies that aremembers of ISO or IEC participate in the development of International Standards through technicalcommittees established by the respective organization to deal with particular fields of technicalactivity.ISO and IEC technical committees collaborate in fields of mutual interest.Other internationalorganizations,governmental and non-governmental,in liaison with ISO and IEC,also take part in thework.In the field of information technology,ISO and IEC have established a joint technical committee,ISO/IEC JTC 1.International Standards are drafted in accordance with the rules given in the ISO/IEC Directives,Part 2.ISO/IEC 27002 was prepared by Joint Technical Committee ISO/IEC JTC 1,Information technology,Subcommittee SC 27,IT Security techniques.Attention is drawn to the possibility that some of the elements of this document may be the subject ofpatent rights.ISO shall not be held responsible for identifying any or all such patent rights.This second edition cancels and replaces the first edition(ISO/IEC 27002:2005),which has beentechnically and structurally revised.ISO/IEC 2013-All rights reserved