February 2024
Intermediate to advanced
71 pages
1h 5m
English
ISO/IEC 27001 is the international information security management standard that more and more organisations are using to ensure that their information security management meets the data protection and compliance requirements of a wide variety of legislation, including the EU’s General Data Protection Regulation (GDPR) and the Directive on security of network and information systems (NIS2 Directive), the US’s HIPAA and GLBA, and others.
While the PCI DSS was not written to map specifically to ISO 27001 or to any other existing framework, it sits clearly within the ISO 27001 framework, and organisations that have implemented an ISO 27001 information security management system (ISMS) should be able, with ...
Read now
Unlock full access