ISO/IEC 27001:2022
Requirements for establishing and improving a risk-based information security management system.
Voluntary framework/standard unless imposed by law, contract or sector rules.
ISO/IEC · 2026-10-23المصدر الرسمي ↗International · Mevzuat
ISO/IEC 27002:2022
Guidance for selecting and implementing information security controls; not a standalone certification claim.
Voluntary framework/standard unless imposed by law, contract or sector rules.
ISO/IEC · 2026-10-23المصدر الرسمي ↗NIST Cybersecurity Framework 2.0
Organize cyber risk outcomes around Govern, Identify, Protect, Detect, Respond and Recover.
Voluntary framework/standard unless imposed by law, contract or sector rules.
NIST · 2026-10-23المصدر الرسمي ↗CIS Critical Security Controls
Prioritized safeguards for practical cyber hygiene and risk reduction.
Voluntary framework/standard unless imposed by law, contract or sector rules.
Center for Internet Security · 2026-10-23المصدر الرسمي ↗يُقيَّم نطاق الأنظمة بحسب أنشطة المؤسسة. هذه القائمة ليست رأياً قانونياً ولا إعلاناً عن صلاحية تدقيق رسمية.