Has ISO27002 improved enough? In today’s blog, Lucia gives her thoughts on the changes to the controls and the new additions.

https://cydea.com/blog/iso27002-thoughts-blog/

#ISO27002 #Compliance #PositiveSecurity

ISO27002 changes are coming.

Our latest blog post breaks down the key factors and timelines for your business.

https://cydea.com/blog/iso27002-changes-blog/

#Cyber #PositiveSecurity #ISO27002 #Accreditation

New to the “audit world” so while studying for my masters, I wanted to refer ISO/IEC 27002 Feb 22 release. I realized it’s a steep $$ to get your hands on & now curious to know why security controls framework/ guidance is not free like NIST 800-53? Any rationale other than ROI?

I mean 200 CHF - isn’t this detrimental & counter-productive as we very well discussed in the Ch. 6 - People controls - make security easy and accessible! Or, is the sand writing say find a torrent for this?

Am I missing something?

Tags: #ISO27002 #NIST #compliance #framework #infosec #security