ISO/IEC 27004:2016
Processes: information needs, measures, procedures, monitoring, analysis, evaluation, review and records (clause 8) – ISO/IEC 27004:2016

ISO/IEC 27004:2016 8.3.4: Document measures and prioritise for implementation

The compiled measures should be documented and ranked for implementation by how important each information need is and how practical it is to get the data; performance measures should come first, to confirm that processes and controls are in place, and effectiveness measures once the performance measures are producing targeted values, with 6.4 governing timing.

Maintained by Gerard BlokdykControl text last updated

Other controls in Processes: information needs, measures, procedures, monitoring, analysis, evaluation, review and records (clause 8) – ISO/IEC 27004:2016

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.