ISO/IEC 27004 Released

ISO/IEC 27004 – has just been published.

http://www.itgovernance.co.uk/products/2858

Thie standard provides guidance on the development and use of measures and measurement in order to assess the effectiveness of an ISMS. It also provides guidance on the measures and measurement for controls or groups of controls.

All of the advice and guidance within ISO/IEC 27004:2009 is designed to be used within the scope of ISO/IEC 27001.