Timeline for What is a similar security standard to ISO 27001 with more focus on IT security?
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 7, 2017 at 15:03 | comment | added | M'vy | IS27k is based on continuous improvement, so while you comply to it, your security should always be improving. There is a baseline under which you can't possibly get certified though, so there's kinda is a sort of 'security level' certification, but it's not well defined nor recognised as such. | |
| Mar 7, 2017 at 15:00 | comment | added | user2514224 | Thank you. I more or less understood that. The problem is the standard is perceived in different way to what it actually covers, including by customers. Purchasers see ISO 27K and think "great they have security". We would prefer a standard that works with us rather than against us, or else massively reduce the scope of applicability of 27K. | |
| Mar 7, 2017 at 13:21 | history | answered | M'vy | CC BY-SA 3.0 |