International Organization for Standards 2700X (ISO 2700X)

The ISO/IEC 27000-series encompasses information security standards published cooperatively by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). Its purpose is to function as the groundwork for third party audits. The standard details a six-step certification process as follows:

• Define an information security policy
• Define range of the information security management system
• Carry out a security risk assessment
• Manage the identified risk
• Select controls to be implemented
• Prepare a Statement of Applicability

Crossroads Information Security Management System (ISMS) has been audited and assessed by the National Accreditation Body.

Learn more about ISO 2700X.