What is EN ISO 27002:2014 ?

EN ISO 27002:2014 and EN ISO 28000:2014 are both important international standards that provide guidelines for information security management and supply chain security management, respectively.

EN ISO 27002:2014 is a professional technical standard that focuses on providing guidelines and best practices for information security management systems. It is part of the ISO/IEC 27000 family, which aims to ensure the confidentiality, integrity, and availability of an organization's information assets. EN ISO 27002:2014 is important because it helps organizations establish and maintain effective information security controls, which are critical in today's digital age, where the risk of cyber threats and data breaches is higher than ever.

EN ISO 28000:2014, on the other hand, is a technical standard designed specifically for the supply chain. It focuses on identifying and managing risks to ensure the safety and security of goods during transportation, storage, and distribution. The main purpose of EN ISO 28000:2014 is to establish a framework for implementing an effective security management system in organizations involved in logistics and supply chain operations.

The key components of EN ISO 28000:2014 include the seven-step supply chain security management process, which includes policy development, risk assessment, risk management, training and awareness, implementation, monitoring, and review. Additionally, the standard includes a number of guidelines for managing and reducing risks, as well as procedures for reporting and measuring the effectiveness of the security management system.

In conclusion, EN ISO 27002:2014 and EN ISO 28000:2014 are both important international standards that provide guidelines for information security management and supply chain security management, respectively. By implementing these standards, organizations can enhance their ability to prevent security threats, minimize the risk of theft or damage to goods, and improve overall supply chain resilience.