Question

Discuss some of the key national and international standards that provide guidance on IT security management and risk assessment.

Answer 1

Hopefully this will clear all your doubts.If you still face any query let me know in the comment section.Thank You.

Key national and international standards are :-

1. In 90s, BS 7799 information security management standard came which focused on security issues related to processes, information as well as people.

2. ISO/IEC 27001 is another national and international standard which provides specifications on IT security management system for both commercial and industrial organizations.

3. ISO/IEC 29100:2011 is another key standard for privacy frameworks.

4. ISO/IEC 29190:2015 is a key standard for capability of assessment model.