CYBERSECURITY GLOSSARY Malware and viruses CYBERSECURITY GLOSSARY Attacks and techniques CYBERSECURITY GLOSSARY Detection and response CYBERSECURITY GLOSSARY Identity and access CYBERSECURITY GLOSSARY Cloud and infrastructure CYBERSECURITY GLOSSARY Compliance and management CYBERSECURITY GLOSSARY Continuity and metrics CYBERSECURITY GLOSSARY Privacy and OSINT CYBERSECURITY GLOSSARY Cybersecurity
← Back to the glossary Cybersecurity glossary · Compliance and management

ISO 27002

ISO 27002 is the international standard that explains how to apply the information security controls required by ISO 27001. Its 2022 version describes 93 controls grouped into four themes: organizational, people, physical and technological, with practical guidance for implementing each one.

How TecnetOne handles it: TecnetGRC

ISO/IEC 27002, ISO 27002:2022, security controls, code of practice

Related terms

Risk matrix

A risk matrix is a table that combines the likelihood of an event with the impact it would have, placing each risk at a level such as low, medium, high or critical. It lets you compare different risks with the same criteria and decide which ones to address first.

View term →

CISO (chief information security officer)

The CISO (chief information security officer) is the executive responsible for a company's information security strategy: they set priorities, budget and policies and answer to leadership for cyber risk. Companies that do not need a full-time CISO can hire a virtual CISO, or vCISO.

View term →

C-TPAT

C-TPAT (Customs Trade Partnership Against Terrorism) is the voluntary US Customs and Border Protection (CBP) program that certifies supply chain companies that meet security requirements, in exchange for faster border inspections. It includes cybersecurity criteria, which is why many importers and their suppliers work on it alongside ISO 27001.

View term →

Cybersecurity

Cybersecurity is the combination of technology, processes and people that protects an organization's devices, networks, applications and data from unauthorized access, theft and disruption. It covers preventing incidents, detecting them early, responding when they happen and restoring operations with the least possible impact.

View term →

Information security policy

An information security policy is the document approved by leadership that defines how the company protects its information: who is responsible, what is allowed, what is prohibited and how incidents are handled. Specific rules come from it, such as password use, remote work or data classification.

View term →
See all glossary terms →

Ready to put this into practice in your operation?

Tell us what you need and a TecnetOne engineer will get back to you.

Talk to an engineer