Back

ISO/IEC 27013:2015

Information technology -- Security techniques -- Guidance on the integrated implementation of ISO/IEC 27001 and ISO/IEC 20000-1

General information

Withdrawn from 25.11.2021
ICS Groups
03.080.99 Other services 03.100.70 Management systems 35.020 Information technology (IT) in general 35.030 IT Security
Directives or regulations
None

Standard history

Status
Date
Type
Name
25.11.2021
Main
ISO/IEC 27013:2021
24.11.2015
Main
ISO/IEC 27013:2015
Main
ISO/IEC 27013:2012
ISO/IEC 27013:2015 provides guidance on the integrated implementation of ISO/IEC 27001 and ISO/IEC 20000-1 for those organizations that are intending to either
a)    implement ISO/IEC 27001 when ISO/IEC 20000-1 is already implemented, or vice versa,
b)    implement both ISO/IEC 27001 and ISO/IEC 20000-1 together, or
c)    integrate existing management systems based on ISO/IEC 27001 and ISO/IEC 20000-1.
ISO/IEC 27013:2015 focuses exclusively on the integrated implementation of an information security management system (ISMS) as specified in ISO/IEC 27001 and a service management system (SMS) as specified in ISO/IEC 20000-1.
In practice, ISO/IEC 27001 and ISO/IEC 20000-1 can also be integrated with other management system standards, such as ISO 9001 and ISO 14001.

Required fields are indicated with *

*
*
*
PDF
82.61 € incl tax
Paper
82.61 € incl tax
Standard monitoring
English (PDF 187 KB)

Related products

Main

ISO/IEC 27013:2021

Information security, cybersecurity and privacy protection — Guidance on the integrated implementation of ISO/IEC 27001 and ISO/IEC 20000-1
Newest version Valid from 25.11.2021
Main + amendment

EVS-EN ISO 13485:2016+A11:2021

Medical devices - Quality management systems - Requirements for regulatory purposes (ISO 13485:2016)
Newest version Valid from 16.09.2021
Main

EVS-EN ISO 9001:2015 en

Quality management systems - Requirements (ISO 9001:2015)
Valid from 06.10.2015
Main + corrigendum

EVS-EN ISO 13485:2016

Medical devices - Quality management systems - Requirements for regulatory purposes (ISO 13485:2016)
Valid from 02.03.2016

Customers who bought this item also bought

Main

ISO/IEC 27000:2016

Information technology -- Security techniques -- Information security management systems -- Overview and vocabulary
Withdrawn from 07.02.2018
Main

ISO/IEC TR 27008:2011

Information technology -- Security techniques -- Guidelines for auditors on information security controls
Withdrawn from 14.01.2019
Main

ISO 22320:2011

Societal security -- Emergency management -- Requirements for incident response
Withdrawn from 05.11.2018
Main

ISO/TR 22312:2011

Societal security -- Technological capabilities
Newest version Withdrawn from 14.09.2018

Standards designation

EVS Estonian standard
EN European standard (published by an CEN or CENELEC)
EN ISO International standard adopted as an European standard
ISO International Organization for Standardization’s standard
IEC International Electrotechnical Commission’s standard
HD CENELEC’s harmonisation document
   
EVS-EN European standard implemented in Estonia
EVS-EN ISO International standard adopted in Europe and implemented in Estonia
EVS-EN ISO/IEC International standard/International electrotechnical standard adopted in Europe and implemented in Estonia
EVS-IEC International electrotechnical standard implemented in Estonia
EVS-ISO International standard implemented in Estonia
   
A, AMD amedment
+A a full standard plus the amendment
/A only amendment
COR, AC corrigendum
+COR a full standard plus the corrigendum
NA national annex
+NA a full standard plus the national annex
/NA only national annex
TS technical specification
TR technical report
CWA agreement, developed by a CEN or CENELEC
prEVS-EN (etc) draft standard
   
et the standard is in Estonian only
en the standard is in English only
et-en the standard is in Parallel text Estonian-English