DIN EN ISO/IEC 27002 E : 2017

National foreword<br>National Annex NA (informative) - Bibliography<br>European foreword <br>Foreword <br>0 Introduction <br>1 Scope <br>2 Normative references <br>3 Terms and definitions <br>4 Structure of this standard <br>5 Information security policies<br>6 Organization of information security<br>7 Human resource security<br>8 Asset management<br>9 Access control<br>10 Cryptography<br>11 Physical and environmental security <br>12 Operations security<br>13 Communications security<br>14 System acquisition, development and maintenance<br>15 Supplier relationships<br>16 Information security incident management<br>17 Information security aspects of business<br>&nbsp;&nbsp;&nbsp;continuity management<br>18 Compliance<br>Bibliography

Provides guidelines for organizational information security standards and information security management practices including the selection, implementation and management of controls taking into consideration the organizations information security risk environment(s).