What is ISO 27002?

ISO 27002 is an international standard providing guidelines for information security management. It serves as a reference set of information security controls, offering best practice recommendations for initiating, implementing, maintaining, and improving information security management within an organization. It is used as a guide for organizations to select, implement and manage controls to address information security risks based on the ISO 27001 framework.