What is ISO27002?

ISO/IEC 27002 is an international standard that provides guidance for organizational information security standards and information security management practices including the selection, implementation and management of controls, taking into consideration the organization's information security risk environment(s). It is commonly used as a reference for developing and maintaining an Information Security Management System (ISMS) and helps organizations implement, maintain and improve their information security management.