September 2019
Intermediate to advanced
58 pages
58m
English
ISO/IEC 27001 is the international information security management standard that more and more organisations are using to ensure that their information security management meets the data protection and compliance requirements of a wide variety of legislation, including the EU’s General Data Protection Regulation (GDPR) and the Directive on security of network and information systems (NIS Directive), the US’s HIPAA and GLBA, and others.
While the PCI DSS was not written to map specifically to ISO 27001 or to any other existing framework, it sits clearly within the ISO 27001 framework, and organisations that have implemented an ISO 27001 information security management system (ISMS) should be able, with ...
Read now
Unlock full access