ISO/IEC 27002:2005 (ISO/IEC 17799:2005) (Download)

ISO/IEC 17799:2005 has now been renumbered ISO/IEC 27002:2005 (Information technology - Security techniques - Code of practice for information security management) . Both ISO/IEC 17799:2005 and ISO/IEC 27002:2005 are identical.

ISO/IEC 27002:2005 establishes guidelines and general principles for initiating, implementing, maintaining, and improving information security management in an organization.

The standard details a comprehensive set of information security control objectives and a selection of best-practice controls.