What is EN ISO 27200: 2011 ?

EN ISO 27200: 2011 is a technical standard that provides guidelines and requirements for data security management systems. It is designed to address the risks and vulnerabilities associated with the storage, processing, transmission, and disposal of information assets.

The standard is composed of several key components, including:

Data Security Management System (DSMS): This component outlines the policies and procedures that an organization should implement to manage its sensitive data.

Information Security Management System (ISMS): This component outlines the overall framework for managing an organization's information security program.

Information Technology (IT) Security Management: This component outlines the specific controls and procedures that an organization should implement to protect its information technology systems.

The purpose of EN ISO 27200: 2011 is to serve as a framework for organizations to establish, implement, maintain, and continually improve their data security management system. It aims to address the risks and vulnerabilities associated with the storage, processing, transmission, and disposal of information assets, and to ensure that sensitive information is protected from unauthorized access, disclosure, alteration, and destruction.

EN ISO 27259: 2011 is a technical standard that provides guidelines and requirements for data security management systems. It serves as a framework for organizations to establish, implement, maintain, and continually improve their data security management system. The standard aims to address the risks and vulnerabilities associated with the storage, processing, transmission, and disposal of information assets, and to ensure that sensitive information is protected from unauthorized access, disclosure, alteration, and destruction.