Phone: (011) 7541-421, 3409-301, 3409-335, 6547-293, 3409-310
E-mail: Standards sales: prodaja@iss.rs Education: iss-edukacija@iss.rs Information about standards: infocentar@iss.rs
Stevana Brakusa 2, 11030 Beograd
Main menu

ISO/IEC 27004:2016

Information technology — Security techniques — Information security management — Monitoring, measurement, analysis and evaluation

Dec 15, 2016

General information

90.92     Jul 24, 2025

ISO/IEC

ISO/IEC JTC 1/SC 27

International Standard

35.030  

English  

Buying

Published

Language in which you want to receive the document.

Scope

ISO/IEC 27004:2016 provides guidelines intended to assist organizations in evaluating the information security performance and the effectiveness of an information security management system in order to fulfil the requirements of ISO/IEC 27001:2013, 9.1. It establishes:
a) the monitoring and measurement of information security performance;
b) the monitoring and measurement of the effectiveness of an information security management system (ISMS) including its processes and controls;
c) the analysis and evaluation of the results of monitoring and measurement.
ISO/IEC 27004:2016 is applicable to all types and sizes of organizations.

Life cycle

PREVIOUSLY

WITHDRAWN
ISO/IEC 27004:2009

NOW

PUBLISHED
ISO/IEC 27004:2016
90.92 Standard to be revised
Jul 24, 2025

REVISED BY

PROJECT
ISO/IEC CD 27004

National adoptions

Information technology — Security techniques — Information security management — Monitoring, measurement, analysis and evaluation

90.92   Standard to be revised

I224 more