The document categorizes ISMS processes into three distinct types to improve clarity and management: Management Processes
| Standard | Purpose | Certifiable? | |----------|---------|---------------| | ISO/IEC 27001 | ISMS requirements | Yes | | ISO/IEC 27002 | Control implementation guidance | No | | ISO/IEC 27005 | Risk management guidance | No | | ISO/IEC 27032 | Cybersecurity guidelines | No | iso 27022 pdf
: Ensuring security information and risk reports reach the right internal and external parties. The document categorizes ISMS processes into three distinct