Guest user Created: Jan 12, 2016 Last commented: Jan 12, 2016

About ISO 27003 for ISO/IEC 27001:2013

I have a question if you can help me please: Is the ISO/IEC 27003:2010 adjustable for implementing ISO/IEC 27001:2013, or is applicable only 2005 version?

0 0

Assign topic to the user

Select user

Guest

DejanK Jan 12, 2016

In theory, you could use larger part of ISO 27003:2010 for ISO 27001:2013 implementation because 2005 and 2013 revisions of ISO 27001 are not very different - see the differences here: https://advisera.com/27001academy/knowledgebase/infographic-new-iso-27001-2013-revision-what-has-changed/

However, all this is theoretical because ISO 27003 was written in such an unreadable way that it wasn't much help for the implementation of ISO 27001:2005 either.

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jan 12, 2016

Expert Advice Community