4 ms·
Annex A is a subset of 27001, but 27001 is focused on security. https://www.iso.org/isoiec-27001-information-security.html https://www.iso.org/isoiec-27001-inf
by jamiesonbecker 6y ago
Annex A is a subset of 27001, but 27001 is focused on security.
https://www.iso.org/isoiec-27001-information-security.html https://www.iso.org/isoiec-27001-information-security.html
(Even so, your point is well taken. The overall 27000 series is more business continuity (DR etc) focused rather than purely security focused.)
- mdb333 6y agoand to be fair, Information Security is generally accepted to cover Confidentiality, Integrity, and Availability (see: CIA Triad)... so DR/BC are definitely within scope.