ISO/IEC 27001:2022
Requirements for establishing and improving a risk-based information security management system.
Voluntary framework/standard unless imposed by law, contract or sector rules.
ISO/IEC · 2026-10-23Source officielle ↗International · Mevzuat
ISO/IEC 27002:2022
Guidance for selecting and implementing information security controls; not a standalone certification claim.
Voluntary framework/standard unless imposed by law, contract or sector rules.
ISO/IEC · 2026-10-23Source officielle ↗NIST Cybersecurity Framework 2.0
Organize cyber risk outcomes around Govern, Identify, Protect, Detect, Respond and Recover.
Voluntary framework/standard unless imposed by law, contract or sector rules.
NIST · 2026-10-23Source officielle ↗CIS Critical Security Controls
Prioritized safeguards for practical cyber hygiene and risk reduction.
Voluntary framework/standard unless imposed by law, contract or sector rules.
Center for Internet Security · 2026-10-23Source officielle ↗Le champ d’application réglementaire est évalué selon les activités de l’organisation. Cette liste ne constitue ni un avis juridique ni une déclaration d’autorité officielle d’audit.