ISO/IEC 27001:2022
Requirements for establishing and improving a risk-based information security management system.
Voluntary framework/standard unless imposed by law, contract or sector rules.
ISO/IEC · 2026-10-23Fuente oficial ↗International · Mevzuat
ISO/IEC 27002:2022
Guidance for selecting and implementing information security controls; not a standalone certification claim.
Voluntary framework/standard unless imposed by law, contract or sector rules.
ISO/IEC · 2026-10-23Fuente oficial ↗NIST Cybersecurity Framework 2.0
Organize cyber risk outcomes around Govern, Identify, Protect, Detect, Respond and Recover.
Voluntary framework/standard unless imposed by law, contract or sector rules.
NIST · 2026-10-23Fuente oficial ↗CIS Critical Security Controls
Prioritized safeguards for practical cyber hygiene and risk reduction.
Voluntary framework/standard unless imposed by law, contract or sector rules.
Center for Internet Security · 2026-10-23Fuente oficial ↗El alcance normativo se evalúa según las actividades de la organización. Esta lista no constituye asesoramiento jurídico ni una declaración de autoridad oficial de auditoría.