ISO/IEC 27032 2012 Standard

The ISO/IEC 27032:2012 standard

ISO/IEC 27032:2012 – Information technology – Security techniques – Guidelines for cybersecurity

This standard provides guidance for improving an organization’s cybersecurity program. It addresses the key elements of cybersecurity and how they can affect other security considerations, including:

• Information security
• Network security
• Internet security
• CIIP (critical information infrastructure protection)

The guidance provided by ISO 27032 supports any information security program, not just those aligned to ISO 27001. It examines cybersecurity from a range of perspectives, including those of stakeholders, and provides an overview of controls and frameworks for managing risks in cyberspace.