ISO 27001 5.27 Learning From Information Security Incidents

Requirement

"Knowledge gained from information security incidents shall be used to strengthen and improve the information security controls."[1]

Explanation

As part of each incident response exercise and actual incident response lessons learned shall be documented and applied to improve the incident response capability.

References

ISO/IEC 27001

Need help putting this into practice? See our ISO 27001 compliance services or read our ISO 27001 articles.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo