ISO 27001 and ISO 27002

What is the difference?
27001 says, how to build your Information security practice or department  while 27002 talks about the security best practices. ISO 27002 was formerly 17799 standard.

Leave a Reply