What is EN ISO 27035-2:2018 ?

EN ISO 27035-2:2018 and EN ISO 27035-1:2018 are both part of the ISO/IEC 27000 series, which is a set of global standards for managing information security. These standards provide guidance to organizations on how to effectively manage the risks associated with information security when engaging with external suppliers.

EN ISO 27035-2:2018 is focused on information security for supplier relationships, while EN ISO 27035-1:2018 is focused on managing information security incidents within an organization. Both standards are designed to minimize the impact of information security incidents on the organization's operations and reputation.

EN ISO 27035-2:2018 provides guidance on the management of the risks associated with information security when engaging with external suppliers. It includes a structured and systematic approach to incident management, which aims to detect, report, assess, and respond to information security incidents in a timely and effective manner.

EN ISO 27035-1:2018 is focused on establishing a structured and systematic approach to incident management within an organization. It includes key components such as incident detection, reporting, assessment, and response. The standard aims to minimize the impact of information security incidents on the organization's operations and reputation by providing guidelines on the timely and effective management of incidents.

In conclusion, EN ISO 27035-2:2018 and EN ISO 27035-1:2018 are both important international standards for managing information security. They provide guidance to organizations on how to effectively manage the risks associated with information security when engaging with external suppliers and incident management, respectively. These standards are designed to minimize the impact of information security incidents on the organization's operations and reputation.