News for hackers. Stuff that matters.

A comment on Our Dumb Security Questionnaire. Parent comment

Re:Our Dumb Security Questionnaire by jamiesonbecker on Friday January 15, 2021 @03:38PM (#25796084)
Annex A is a subset of 27001, but 27001 is focused on security.

https://www.iso.org/isoiec-27001-information-security.html

(Even so, your point is well taken. The overall 27000 series is more business continuity (DR etc) focused rather than purely security focused.)

[ Parent | on HN ]
Re:Our Dumb Security Questionnaire by mdb333 on Friday January 15, 2021 @07:12PM (#25798427)
and to be fair, Information Security is generally accepted to cover Confidentiality, Integrity, and Availability (see: CIA Triad)... so DR/BC are definitely within scope.
[ Parent | on HN ]