Sorry to ask this, I am quite new to Security area. Recently I am trying to introduce some security standards.
After some searching I found this out in this doc
Among them, ISO is the best-known standard for ISMS, which helps to establish and maintain an effective information management system via a continuous improvement approach.
And this statement in this site
One of the most in-demand IT certification is CISSP®, for Certified Information Systems Security Professionals.
I want to check the domains one by one to try my best to ensure the security management is well established based on worldwide sophisticated standards.
But as you can see, there are different domains in these standards.
Here are the domain comparisons among them I just drafted up based on ISO/IEC 27002 and CBK.
Which one should I turn to? To persuade my boss to apply?
By the way, to me the CBK is more like a examination stuff and quite unpractical.