ISO/IEC 27013 aims to help organizations integrate their implementation of an information security management system to ISO/IEC 27001:2017 and a services management system to ISO/IEC 20000-1:2018.
ISO/IEC 27013 on information security, cybersecurity, and privacy protection are useful for:
ISO/IEC 27013 provides for the credible provision of effective and secure information/IT services. ISO/IEC 27013 can lower the cost of implementing, maintaining, and auditing an integrated management system where effective and efficient management of both services and information security are part of an organization’s strategy. ISO/IEC 27013 can reduce implementation time due to the integrated development of processes common to both standards. ISO/IEC 27013 can support better communication, increased reliability, and improved operational efficiency through the elimination of unnecessary duplication. ISO/IEC 27013 can strengthen the understanding by service management and information security personnel of each other’s viewpoints. ISO/IEC 27013 can strengthen organizational risk management.
ISO/IEC 27013 contributes to UN Sustainable Development Goal 9 on the industry, innovation, and infrastructure by underpinning more secure and resilient infrastructures.
ISO/IEC 27013:2015