Ebook: ISO/IEC 27004:2016, Information technology — Security techniques — Information security management — Monitoring, measurement, analysis and evaluation

BS ISO/IEC 27004 provides guidance on how to assess the performance of an Information Security Management System (ISMS) developed and implemented using BS ISO/IEC 27001. It explains how to develop and operate measurement processes, and how to assess and report the results of the associated measurement constructs.

Assessment and improvement of both processes and controls is an integral part of any management system. BS ISO/IEC 27004 shows how the effectiveness of an ISMS built using ISO/IEC 27001 can be monitored and assessed.