3 ms·
You have to buy the ISO 27001 standard, which is a security standard: “ISO/IEC 27001:2013 specifies the requirements for establishing, implementing, maintaining
by Shank 6y ago
You have to buy the ISO 27001 standard, which is a security standard: “ISO/IEC 27001:2013 specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system within the context of the organization. It also includes requirements for the assessment and treatment of information security risks tailored to the needs of the organization.”
- s_dev 6y agoSo is this standard considered 'free' and 'open'?
- chrismeller 6y agoAbsolutely not. None of the ISO standards would meet either of those criteria.
- arthur2e5 6y agoNah, the term "open standard" is so vague that is probably does. In its laxest definition -- endorsed by ISO itself -- it's just a standard managed by a nonprofit standard organization. In the more common definition it only requires royalty-free use plus the org. Requiring free access is unfortunately an extreme in the spectrum of definitions.