What is Information Security Standards?

Information security standards as the name suggests are standard digital security measures to prevent or mitigate cyber security attacks. These standards provide general guidelines as well as specific techniques for implementing cyber security. Globally there are agencies that provide accreditation for cyber security standards. The famous certifications are ISO 27001 and 27002.

ISO/IEC 27001 formally specifies a management system that is intended to bring information security under explicit management control. ISO/IEC 27002 incorporates mainly part 1 of the BS 7799 good security management practice standard. ISO/IEC 27002 is a high level guide to cyber security. It is highly beneficial as explanatory guidance for the management of an organization to obtain certification to the ISO 27001 standard. The certification once obtained lasts three years.