ISO/IEC DIS 27004   Stage 40.60, close of voting Planning date, an estimate 14 Sep 2027 The recordFree checkKit USD 799 and watch USD 49 a month
ANSWER

How do I use ISO 27004 as an implementation guide?

All answers

Start with the requirement, then use the guidance to shape the method. The order is: information needs, measures, procedures, monitoring, analysis, evaluation and records. The 2016 edition adds detail to each step; it does not replace the requirement.

The short answer, expanded

Start with the requirement, then use the guidance to shape the method. The order is: information needs, measures, procedures, monitoring, analysis, evaluation and records. The 2016 edition adds detail to each step; it does not replace the requirement.

What to do next

The free check turns this answer into a dated reading for your organization. The register gives you the clause or measure behind the answer. If the question is about a customer or a tender, answer with the requirement standard and the certificate, not with a draft.

Run the free check Open the register

Related questions

Where do I start?

Clause 8.2, the information needs. Then 8.3.3, the measure construct.

How long does it take?

It depends on the existing programme. The plan page gives a 90 day sequence for the requirement work.

Can I use the free register?

Yes. It is the same record the kit is built from.