What is EN ISO 27073:2011 ?

EN ISO 27073:2011 is a technical standard that provides guidelines for implementing and managing information security controls in organizations. It is based on the ISO/IEC 27001 standard, which is a global benchmark for information security management systems. The main purpose of EN ISO 27073:2011 is to help organizations identify and address information security risks and protect their sensitive information assets.

EN ISO 27073:2011 is made up of several key components, including Human Resources Security and Physical and Environmental Security. Human Resources Security focuses on ensuring that individuals with access to sensitive information are trustworthy and aware of their responsibilities. This component covers areas such as screening, training, and awareness programs.

Physical and Environmental Security is also an essential component of EN ISO 27073:201Organizations must implement measures to protect their physical assets, including buildings, equipment, and storage facilities, from unauthorized access, damage, or interference.

EN ISO 27025:2011 plays a vital role in data protection and privacy for organizations. Firstly, this standard provides a systematic approach to managing information security risks. By implementing the guidelines outlined in EN ISO 27025:2011, organizations can identify potential threats, assess their impact, and establish controls to mitigate these risks.

In conclusion, EN ISO 27073:2011 is an essential standard for organizations to ensure the confidentiality, integrity, and availability of their information. By implementing the controls and measures outlined in this standard, organizations can identify and address information security risks and protect their sensitive information assets.