ISO/IEC 27035-1:2023 AND ISO/IEC 27035-2:2023 WITH NEW VERSIONS
ISO/IEC 27035-1:2023 Information technology. Information security incident management. Part 1: Principles and process
Part 1: "Principles fand process" it the fundament for the ISO/IEC 27035 series and provides a comprehensive framework of concepts, principles and processes for the effective management of information security incidents. for a structured approach, covering aspects such as incident management preparation, detection, reporting, assessment, response and application of lessons learned.Key changes in the new version of ISO/IEC 27035-1:2023:
- title have been changed to better reflect content;
- new terms "Incident Management Team" and "Incident Coordinator" have been introduced in Clause 3;
- new sub-clauses have been added to Clause 4 - 4.5, 4.6 and 4.7;
- the title of Clause 5 has been changed from "Plan and prepare phase" to "Process";
- annex C has been updated and a new Annex D has been added;
- editorial corrections have been made throughout.
ISO/IEC 27035-2:2023 Information technology. Information security incident management. Part 2: Guidelines to plan and prepare for incident response
ISO/IEC 27035-2 complements the guidance in ISO/IEC 27035-1 by focusing on guidelines for planning and preparing to respond to information security incidents.
It covers the "planning and preparation" and "lessons learned" phases of the information security incident management model presented in ISO/IEC 27035-1:2023 (clauses 5.2 and 5.6).
Recent enhancements to ISO/IEC 27035-2:2023 include:
- title has been changed;
- new roles such as 'incident management team' and 'incident coordinator' and their responsibilities have been add;
- texts related to vulnerability management have been changed;
- in clause 6.7, text has been added for a recommended process;
- the structure of Clause 7 has been reorganised;
- C.3 has been replaced by one paragraph;
- the bibliography has been updated.
The ISO/IEC 27035 series play an important role in the management of information security incidents within organisations. While policies and controls are critical, these standards emphasise the importance of structured and planned approaches to effectively prepare for, respond to and learn from information security incidents. Their adaptable structure ensures that organisations of all sizes and types can take advantage of the guidance provided, resulting in improved information security and more robust business operations. The ISO/IEC 27035 series is designed to provide additional guidance on the incident management controls in ISO/IEC 27002. These controls should be applied based on the information security risks faced by an organization.
ISO/IEC 27035-1:2023 and ISO/IEC 27035-2:2023 are tools for organizations seeking to achieve a strong and comprehensive information security program. By applying the principles and guidelines outlined in these standards, organizations can better protect their digital assets, mitigate risks, and respond effectively to ever-increasing number of threats and cyberattacks.
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.
