What is ISO/IEC 27002?

ISO/IEC 27002 is an information security standard titled "Code of practice for information security controls". It provides guidance and best practices for information security management. It is used as a reference for selecting, implementing, and managing security controls within an information security management system (ISMS) to protect the confidentiality, integrity, and availability of information assets. It covers a wide range of security controls, including organizational, human resource, physical, and technological controls, mapped to address various information security risks.