ISO 27002 Status

There is no real rush: ISO 27002 is simply the re-publication of ISO 17799, but with a different name. Why this is deemed necessary as an interim publication, rather than at the next upgrade, is unclear. However, the momentum behind the ISO 27000 series concept has driven the decision in this direction.

The original intention was to rename ISO 17799 in April 2007. Due to several factors, this did not occur. The decision to press ahead though was endorsed in May at a meeting of the appropriate ISO sub-committee (SC 27).

Despite this, a search of all the major internet webstores and a scan of the websites of the standard bodies indicates that ISO 27002 is still not available.

We will update this post when this position changes.