Annex A is a subset of 27001, but 27001 *is* focused on security. https://www.is... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

jamiesonbecker on Jan 15, 2021 | parent | context | favorite | on: Our Dumb Security Questionnaire

Annex A is a subset of 27001, but 27001 is focused on security.

https://www.iso.org/isoiec-27001-information-security.html

(Even so, your point is well taken. The overall 27000 series is more business continuity (DR etc) focused rather than purely security focused.)

mdb333 on Jan 16, 2021 [–]

and to be fair, Information Security is generally accepted to cover Confidentiality, Integrity, and Availability (see: CIA Triad)... so DR/BC are definitely within scope.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact