The updated standard has a simpler framework that may be adopted throughout an organization. ISO 27002 has been updated and may now be used to manage a broader risk profile. This includes information security and the more technical components of physical security, asset management, cyber security, human resource security, and privacy protection. Read More