ISO 31000:2018 provides guidelines on managing risk faced by organizations. The application of these guidelines can be customized to any organization and its context. ISO...

ISO/IEC 27001:2013 specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system within the context of the organization. It also...

This document gives guidance regarding how organizations can establish monitoring, measurement, analysis and evaluation processes, including the development of relevant indicators for the assessment of...

This document gives guidance on the governance of organizations. It provides principles and key aspects of practices to guide governing bodies and governing groups on...