text:
X
From Wikipedia, the free encyclopedia
Jump to: navigation, search
This article is about the letter. For the multiplication sign, see Multiplication sign. For other uses, see X (disambiguation).
ISO basic
Latin alphabet
Aa Bb Cc Dd
Ee Ff Gg Hh
Ii Jj Kk Ll
Mm Nn Oo Pp
Qq Rr Ss Tt
Uu Vv Ww Xx
Yy Zz
v
t
e
Writing cursive forms of X
X (named ex /ɛks/, plural exes[1]) is the 24th and antepenultimate letter in the modern English alphabet and the ISO basic Latin alphabet.
Contents
[hide]
1 History
2 Use in writing systems
2.1 English
2.2 Other languages
2.3 Other systems
3 Other uses
4 Related characters
4.1 Descendants and related characters in the Latin alphabet
4.2 Ancestors and siblings in other alphabets
5 Computing codes
6 Other representations
7 See also
8 References
9 External links
History[edit]
Greek Chi
Etruscan
:X
In Ancient Greek, 'Χ' and 'Ψ' were among several variants of the same letter, used originally for /kʰ/ and later, in western areas such as Arcadia, as a simplification of the digraph 'ΧΣ' for /ks/. In the end, more conservative eastern forms became the standard of Classical Greek, and thus 'Χ' (Chi) stands for /kʰ/ (later /x/). However, the Etruscans had taken over 'Χ' from western Greek, and it therefore stands for /ks/ in Etruscan and Latin.[citation needed]
The letter 'Χ' ~ 'Ψ' for /kʰ/ was a Greek addition to the alphabet, placed after the Semitic letters along with phi 'Φ' for /pʰ/. (The variant 'Ψ' later replaced the digraph 'ΦΣ' for /ps/; omega was a later addition).[citation needed]
Use in writing systems[edit]
English[edit]
In English orthography, ⟨x⟩ is typically pronounced as the voiceless consonant cluster /ks/ when it follows the stressed vowel (e.g. ox), and the voiced consonant /ɡz/ when it precedes the stressed vowel (e.g. exam). It is also pronounced /ɡz/ when it precedes a silent ⟨h⟩ and a stressed vowel (e.g. exhaust).[2] Before ⟨i⟩ or ⟨u⟩, it can be pronounced /kʃ/ or /ɡʒ/ (e.g. sexual and luxury); these result from earlier /ksj/ and /ɡzj/. It also makes the sound /kʃ/ in words ending in -xion (typically used only in British-based spellings of the language; American spellings tend to use -ction). When ⟨x⟩ ends a word, it is always /ks/ (e.g. ax), except in loan words such as faux (see French, below).
There are very few English words that start with ⟨x⟩ (the fewest number of any letter). When ⟨x⟩ does start a word, it is usually pronounced /z/ (e.g. xylophone, xenophobia, and xanthan); in rare recent loanwords or foreign proper names, it can also be pronounced /s/ (e.g. the obsolete Vietnamese monetary unit xu) or /ʃ/ (e.g. Chinese names starting with Xi like Xiaomi or Xinjiang). Many of the words that start with ⟨x⟩ are of Greek origin, or standardized trademarks (Xerox) or acronyms (XC). In abbreviations, it can represent "trans-" (e.g. XMIT for transmit, XFER for transfer), "cross-" (e.g. X-ing for crossing, XREF for cross-reference), "Christ-" as shorthand for the labarum (e.g. Xmas for Christmas, Xian for Christian), the "crys-" in crystal (XTAL), or various words starting with "ex-" (e.g. XL for extra large, XOR for exclusive-or).
X is the third least frequently used letter in English (after ⟨q⟩ and ⟨z⟩), with a frequency of about 0.15% in words.[3]
Other languages[edit]
In Latin, ⟨x⟩ stood for [ks]. In some languages, as a result of assorted phonetic changes, handwriting adaptations or simply spelling convention, ⟨x⟩ has other pronunciations:
Basque: as a spelling for[ʃ]. Additionally there is the digraph ⟨tx⟩ [tʃ].
Dutch: ⟨x⟩ usually represents [ks], except in the name of the island of Texel, which is pronounced Tessel. This is because of historical sound-changes in Dutch, where all /ks/ sounds have been replaced by /s/ sounds. Words with an ⟨x⟩ in the Dutch language are nowadays usually loanwords. In the Dutch-speaking part of Belgium, family names with ⟨x⟩ are not uncommon (e.g. Dierckx, Hendrickx, Koninckx, Sterckx, Vranckx).
In Norwegian, ⟨x⟩ is generally pronounced [ks], but since the 19th century, there has been a tendency to spell it out as 'ks'; it may still be retained in personal names, though it is fairly rare, and occurs mostly in foreign words and SMS language. Usage in Danish, German and Finnish is similar.
French: at the ends of words, silent (or [z] in liaison if the next word starts with a vowel). Three exceptions are pronounced [s]: six ("six"), dix ("ten") and in some city names such as Bruxelles (although some people still pronounce it 'ks') or Auxerre; it is fully pronounced [ks] in Aix-la-Chapelle. It is pronounced [z] in sixième and dixième.
In Italian, ⟨x⟩ is either pronounced [ks], as in extra, uxorio, xilofono,[4] or [ɡz], as exogamia, when it is preceded by ⟨e⟩ and followed by a vowel. In several related languages, notably Venetian, it represents the voiced sibilant [z]. It is also used, mainly amongst the young people, as a short written form for "per", meaning "for": for example, "x sempre" ("forever"). This is because in Italian the multiplication sign (similar to ⟨x⟩) is called "per". However, ⟨x⟩ is found only in loanwords, as it is not part of the standard Italian alphabet; in most words with ⟨x⟩, this letter may be replaced with 's' or 'ss' (with different pronunciation: xilofono/silofono, taxi/tassì) or, rarely, by 'cs' (with the same pronunciation: claxon/clacson).
In Old Spanish, ⟨x⟩ was pronounced [ʃ], as it is still currently in other Iberian Romance languages. Later, the sound evolved to a hard [x] sound. In modern Spanish, due to a spelling reform, whenever ⟨x⟩ is used for the [x] sound it has been replaced with ⟨j⟩, including in words that originally had ⟨x⟩ such as ejemplo or ejercicio, though ⟨x⟩ is still retained for some names (notably 'México', even though 'Méjico' may sometimes be used in Spain). Presently, ⟨x⟩ represents the sound [s] (word-initially), or the consonant cluster [ks] (e.g. oxígeno, examen). Rarely, it can be pronounced [ʃ] as in Old Spanish in some proper nouns such as 'Raxel' (a variant of Rachel) and Uxmal.
In Galician and Leonese, ⟨x⟩ is pronounced [ʃ] in most cases. In learned words, such as 'taxativo' (taxing), it is pronounced [ks]. However, Galician speakers tend to pronounce it [s], especially when it appears before plosives, such as in 'externo' (external).
In Catalan, ⟨x⟩ has three sounds; the most common is [ʃ]; as in 'xarop' (syrup). Other sounds are: [ks]; 'fixar' (to fix), [ɡz]; 'examen'. In addition, [ʃ] gets voiced to [ʒ] before voiced consonants; 'caixmir'. Catalan also has the digraph ⟨tx⟩, pronounced [tʃ].
In Portuguese, ⟨x⟩ has four main sounds; the most common is [ʃ], as in 'xícara' (cup). The other sounds are: [ks] as in 'flexão' (flexion); [s], when preceded by E and followed by a consonant, as in 'contexto' ([ʃ] in European Portuguese), and in a small number of other words, such as 'próximo' (close/next); and (the rarest) [z], which occurs in the prefix 'ex-' before a vowel, as in 'exagerado' (exaggerated). A rare fifth sound is [ɡz], coexisting with [z] and [ks] as acceptable pronunciations in exantema and in words with the Greek prefix 'hexa-'.
In Venetian, it represents the voiced alveolar sibilant [z] much like in Portuguese 'exagerado', English 'xylophone' or in the French 'sixième'. Examples from medieval texts include raxon (reason), prexon (prison), dexerto (desert), chaxa/caxa (home). Nowadays, the best-known word is xe (is/are). The most notable exception to this rule is the name Venexia [veˈnɛsja] in which ⟨x⟩ has evolved from the initial voiced sibilant [z] to the present day voiceless sibilant.
In Albanian, ⟨x⟩ represents [dz], while the digraph ⟨xh⟩ represents [dʒ].
In Maltese, ⟨x⟩ is pronounced [ʃ] or, in some cases, [ʒ] (only in loanwords such as 'televixin', and not for all speakers).
In Polish, ⟨x⟩ was used prior to 19th century both in loanwords and native words and was pronounced [ks] or [gz], e.g. xiążę, xięstwo (now książę, księstwo). Later was replaced by ⟨ks⟩ and ⟨gz⟩ in all words and remained only in surnames as Axentowicz, Jaxa, Koxowski, Mixtacki, Rexemowski, Xiężopolski, names as Xawery, Xymena and abbreviations.
Additionally, in languages for which the Latin alphabet has been adapted only recently, ⟨x⟩ has been used for various sounds, in some cases inspired by European usage, but in others, for consonants uncommon in Europe. For these no Latin letter stands out as an obvious choice, and since most of the various European pronunciations of ⟨x⟩ can be written by other means, the letter becomes available for more unusual sounds.
⟨x⟩ represents [x] (voiceless velar fricative) or [ꭓ] (voiceless uvular fricative) in e.g. Azerbaijani, Kurdish, Lojban, Tatar, Uzbek, Pashto and Uyghur (Latin script).
Esperanto: The x-convention replaces ⟨ĉ⟩, ⟨ĝ⟩, ⟨ĥ⟩, ⟨ĵ⟩, ⟨ŝ⟩, and ⟨ŭ⟩ with x-suffixes: ⟨cx⟩, ⟨gx⟩, ⟨hx⟩, ⟨jx⟩, ⟨sx⟩, and ⟨ux⟩.
In transliteration of Indian languages, ⟨x⟩ represents the consonant cluster [kʃ] in alternate spellings of words containing 'क्ष' (kṣ), especially names such as Laxmi and Dixit. Less frequently, ⟨x⟩ is used to represent 'ख़' [x].
In Apache ⟨x⟩ represents [x]
In Nahuatl, ⟨x⟩ represents [ʃ].
In Nguni languages, ⟨x⟩ represents the alveolar lateral click [ǁ].
In Pirahã, ⟨x⟩ symbolizes the glottal stop [ʔ].
An illustrating example of "x" as a "leftover" letter is differing usage in three different Cushitic languages:
Afar: voiced alveolar implosive [ɗ]
Oromo: alveolar ejective [tʼ]
Somali: voiceless pharyngeal fricative [ħ]
In Southeast Asia:
In Lao, based on romanization of Lao consonants, ⟨x⟩ may represent [ɕ], e.g. in Lan Xang.
In Vietnamese, ⟨x⟩ is pronounced like English ⟨s⟩ (at the beginning of a word, e.g. "sing"). This sound was [ɕ] in Middle Vietnamese, resembling the Portuguese sound /ʃ/, spelled ⟨x⟩.
In Hanyu Pinyin, Standard Chinese's official transcription system in China, Malaysia, Singapore, and Taiwan, the letter ⟨x⟩ represents the voiceless alveolo-palatal fricative /ɕ/, for instance in 'Xi', [ɕi]. This sound somewhat resembles [ʃ].
Other systems[edit]
In the International Phonetic Alphabet, ⟨x⟩ represents a voiceless velar fricative.
Other uses[edit]
In mathematics, x is commonly used as the name for an independent variable or unknown value. The modern tradition of using x to represent an unknown was introduced by René Descartes in La Géométrie (1637).[5] As a result of its use in algebra, X is often used to represent unknowns in other circumstances (e.g. X-rays, Generation X, The X-Files, and The Man from Planet X; see also Malcolm X).
In the Cartesian coordinate system, x is used to refer to the horizontal axis.
It may also be used as a typographic approximation for the multiplication sign. In mathematical typesetting, x meaning an algebraic variable is normally in italic type ( x {\displaystyle x\!} ), partly to avoid confusion with the multiplication symbol. In fonts containing both x (the letter) and × (the multiplication sign), the two glyphs are dissimilar.
It can be used as an abbreviation for 'between' in the context of historical dating; e.g., '1483 x 1485'.
Maps and other images sometimes use an X to label a specific location, leading to the expression "X marks the spot".[6]
The Roman numeral Ⅹ represents the number 10.[7][8]
In art or fashion, the use of X indicates a collaboration by two or more artists, e.g. Aaron Koblin x Takashi Kawashima. This application, which originated in Japan, now extends to other kinds of collaboration outside the art world.[9]
Related characters[edit]
Descendants and related characters in the Latin alphabet[edit]
X with diacritics: Ẍ ẍ Ẋ ẋ ᶍ[10]
IPA-specific symbols related to X: χ
Teuthonista phonetic transcription-specific symbols related to X:[11]
U+AB56 ꭖ LATIN SMALL LETTER X WITH LOW RIGHT RING
U+AB57 ꭗ LATIN SMALL LETTER X WITH LONG LEFT LEG
U+AB58 ꭘ LATIN SMALL LETTER X WITH LONG LEFT LEG AND LOW RIGHT RING
U+AB59 ꭙ LATIN SMALL LETTER X WITH LONG LEFT LEG WITH SERIF
ˣ : Modifier letter small x is used for phonetic transcription
ₓ : Subscript small x is used in Indo-European studies[12]
Ancestors and siblings in other alphabets[edit]
Χ χ : Greek letter Chi, from which the following derive:
Х х : Cyrillic letter Kha
Ⲭ ⲭ : Coptic letter Khe, which derives from Greek Chi
𐍇 : Gothic letter enguz, which derives from Greek Chi
𐌗 : Old Italic X, which derives from Greek Chi, and is the ancestor of modern Latin X
ᚷ : Runic letter Gyfu, which may derive from old Italic X
Ξ ξ : Greek letter Xi, which was used in place of Chi in the Eastern (and the modern) Greek alphabets
Computing codes[edit]
Character
X
x
Unicode name LATIN CAPITAL LETTER X LATIN SMALL LETTER X
Encodings
decimal
hex
decimal
hex
Unicode 88 U+0058 120 U+0078
UTF-8 88 58 120 78
Numeric character reference X X x x
EBCDIC family 231 E7 167 A7
ASCII 1 88 58 120 78
1 Also for encodings based on ASCII, including the DOS, Windows, ISO-8859 and Macintosh families of encodings.
In the C programming language, 'x' preceded by zero (0x or 0X) is used to denote hexadecimal literal values.
Other representations[edit]
NATO phonetic Morse code
X-ray –··–
Signal flag Flag semaphore American manual alphabet (ASL fingerspelling) Braille
dots-1346
See also[edit]
XX
XXX
XXXX
X mark
Commonly used as a prefix term in nouns related to the X Window System and Unix
References[edit]
Jump up ^ "X", Oxford English Dictionary, 2nd edition (1989); Merriam-Webster's Third New International Dictionary of the English Language, Unabridged (1993); "ex", op. cit.
Jump up ^ Venezky, Richard (1 January 1970). The Structure of English Orthography. Walter de Gruyter. p. 40. ISBN 978-3-11-080447-8.
Jump up ^ Mička, Pavel. "Letter frequency (English)". Algoritmy.net. Retrieved 9 February 2014.
Jump up ^ "Dizionario di ortografia e pronunzia" [Dictionary of Spelling and Pronunciation]. Dizionario di ortografia e pronunzia (in Italian). Retrieved 9 February 2014.
Jump up ^ Cajori, Florian (1928). A History of Mathematical Notations. Chicago: Open Court Publishing. p. 381. See History of algebra.
Jump up ^ "X marks the spot". Retrieved 21 June 2016.
Jump up ^ Gordon, Arthur E. (1983). Illustrated Introduction to Latin Epigraphy. University of California Press. p. 44. Retrieved 3 October 2015.
Jump up ^ King, David A. (2001). The Ciphers of the Monks. p. 282. In the course of time, I, V and X became identical with three letters of the alphabet; originally, however, they bore no relation to these letters.
Jump up ^ http://arkitip.com/product/x-mark-of-collaboration-issue-no-0053x/
Jump up ^ Constable, Peter (2004-04-19). "L2/04-132 Proposal to add additional phonetic characters to the UCS" (PDF).
Jump up ^ Everson, Michael; Dicklberger, Alois; Pentzlin, Karl; Wandl-Vogt, Eveline (2011-06-02). "L2/11-202: Revised proposal to encode "Teuthonista" phonetic characters in the UCS" (PDF).
Jump up ^ Anderson, Deborah; Everson, Michael (2004-06-07). "L2/04-191: Proposal to encode six Indo-Europeanist phonetic characters in the UCS" (PDF).
External links[edit]
Media related to X at Wikimedia Commons
The dictionary definition of X at Wiktionary
The dictionary definition of x at Wiktionary
"X". The American Cyclopædia. 1879.
[hide]
v
t
e
Latin script
History
Spread
Romanization
Roman numerals
Alphabets (list)
Classical Latin alphabet
ISO basic Latin alphabet
phonetic alphabets
International Phonetic Alphabet
X-SAMPA
Spelling alphabet
Letters (list)
Letters of the ISO basic Latin alphabet
Aa Bb Cc Dd Ee Ff Gg Hh Ii Jj Kk Ll Mm Nn Oo Pp Qq Rr Ss Tt Uu Vv Ww Xx Yy Zz
Letter X with diacritics
X́x́ X̂x̂ Ẍẍ X̌x̌ Ẋẋ X̧x̧ X̱x̱ X̣x̣ ᶍ
Multigraphs
Digraphs
ch
cz
dž
dz
gh
ij
ll
ly
nh
ny
sh
sz
th
Trigraphs
dzs
eau
Tetragraphs
ough
Pentagraphs
tzsch
Keyboard layouts (list)
QWERTY
QWERTZ
AZERTY
Standards
ISO/IEC 646
Unicode
Western Latin character sets
Lists
precomposed Latin characters in Unicode
letters used in mathematics
Diacritics
Palaeography
Retrieved from "https://en.wikipedia.org/w/index.php?title=X&oldid=819449058"
Categories:
ISO basic Latin letters
Hidden categories:
CS1 Italian-language sources (it)
Wikipedia indefinitely move-protected pages
All articles with unsourced statements
Articles with unsourced statements from July 2013
Articles containing Basque-language text
Articles containing Dutch-language text
Articles containing French-language text
Wikipedia articles incorporating a citation from The American Cyclopaedia
Wikipedia articles incorporating a citation from The American Cyclopaedia with a Wikisource reference
Navigation menu
Personal tools
Not logged in
Talk
Contributions
Create account
Log in
Namespaces
Article
Talk
Variants
Views
Read
Edit
View history
More
Search
Navigation
Main page
Contents
Featured content
Current events
Random article
Donate to Wikipedia
Wikipedia store
Interaction
Help
About Wikipedia
Community portal
Recent changes
Contact page
Tools
What links here
Related changes
Upload file
Special pages
Permanent link
Page information
Wikidata item
Cite this page
Print/export
Create a book
Download as PDF
Printable version
In other projects
Wikimedia Commons
Languages
Acèh
Afrikaans
Alemannisch
አማርኛ
العربية
Aragonés
ܐܪܡܝܐ
Asturianu
Avañe'ẽ
Azərbaycanca
تۆرکجه
Bân-lâm-gú
Беларуская
Беларуская (тарашкевіца)
Български
Brezhoneg
Català
Чӑвашла
Čeština
Corsu
Cymraeg
Dansk
Deutsch
Eesti
Ελληνικά
Español
Esperanto
Euskara
فارسی
Føroyskt
Français
Frysk
Furlan
Gaeilge
Gaelg
Gàidhlig
Galego
贛語
Хальмг
한국어
Հայերեն
Hrvatski
Ido
Ilokano
Bahasa Indonesia
Íslenska
Italiano
עברית
ქართული
Kernowek
Kiswahili
Коми
Kreyòl ayisyen
Kurdî
Latina
Latviešu
Lietuvių
Magyar
Македонски
मराठी
Bahasa Melayu
Mìng-dĕ̤ng-ngṳ̄
Nāhuatl
Nederlands
日本語
Nordfriisk
Norsk
Norsk nynorsk
Nouormand
Occitan
Олык марий
Oʻzbekcha/ўзбекча
ਪੰਜਾਬੀ
Polski
Português
Română
Runa Simi
Русский
Sardu
Scots
Seeltersk
Simple English
Slovenčina
Slovenščina
Sranantongo
Српски / srpski
Basa Sunda
Suomi
Svenska
Tagalog
Татарча/tatarça
ไทย
Türkçe
Українська
Tiếng Việt
Volapük
Winaray
ייִדיש
Yorùbá
粵語
Zazaki
Žemaitėška
中文
Edit links
This page was last edited on 9 January 2018, at 12:37.
Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may apply. By using this site, you agree to the Terms of Use and Privacy Policy. Wikipedia® is a registered trademark of the Wikimedia Foundation, Inc., a non-profit organization.
Privacy policy
About Wikipedia
Disclaimers
Contact Wikipedia
Developers
Cookie statement
Mobile view
Enable previews

values: mw-page-base noprint

values: mw-head-base noprint

values: firstHeading firstHeading en

values: siteSub noprint

values: jump-to-nav mw-jump

values:
/wiki/X_(disambiguation)
mw-disambig
X (disambiguation)

attrs: role class

values:
note
hatnote navigation-not-searchable

attrs: alt src width height srcset data-file-width data-file-height

value: td

values: padding:0.4em 0;padding-top: 1em; padding-bottom: 1em;

values: float:right;clear:right;width:12em;margin:0 0 1.0em 1.0em;background:#f9f9f9;border:1px solid #aaa;padding:0.2em;border-spacing:0.4em 0;text-align:center;line-height:1.4em;font-size:88%

values: Representation in the International Phonetic Alphabet (IPA)

values:
/wiki/Classical_Greek
mw-redirect
Classical Greek

values: This claim needs references to reliable sources. (July 2013)

values:
noprint Inline-Template Template-Fact
white-space:nowrap;

values:
/wiki/Phi_(letter)
mw-redirect
Phi (letter)

values: American and British English spelling differences

values:
/wiki/Exclusive_disjunction
mw-redirect
Exclusive disjunction

values:
/wiki/Family_name
mw-redirect
Family name

values:
/wiki/Italian_alphabet
mw-redirect
Italian alphabet

values:
/wiki/Old_Spanish
mw-redirect
Old Spanish

values:
/wiki/Leonese_language
mw-redirect
Leonese language

values:
/wiki/Kurdish_language
mw-redirect
Kurdish language

values:
/wiki/Pashto_language
mw-redirect
Pashto language

values:
/wiki/Alveolar_lateral_click
mw-redirect
Alveolar lateral click

values:
/wiki/Alveolar_ejective
mw-redirect
Alveolar ejective

values:
/wiki/Hanyu_Pinyin
mw-redirect
Hanyu Pinyin

values:
/wiki/Independent_variable
mw-redirect
Independent variable

values: vertical-align: -0.338ex; margin-right: -0.271ex; width:1.214ex; height:1.676ex;

values:
/wiki/Roman_numeral
mw-redirect
Roman numeral

values:
/wiki/10_(number)
mw-redirect
10 (number)

values: Edit section: Descendants and related characters in the Latin alphabet

values:
monospaced
font-family: monospace, monospace;

values: font-variant: small-caps; font-size: smaller;

values: Edit section: Ancestors and siblings in other alphabets

values: font-family:'FreeSerif', 'New Athena Unicode', 'MPH 2B Damase', 'Arial Coptic', Quivira, Analecta, Antinoou, 'Sophia Nubian', 'Noto Sans Coptic', 'Segoe UI Historic', 'Segoe UI Symbol';

values: font-size: 125%; font-family: Vulcanius, Junicode, Pfeffer Mediæval, Ulfilas, Silubr, Skeirs, Midjungards, ALPHABETUM, FreeSerif, FreeSans, 'Noto Sans Gothic', Code2001, 'Segoe UI Historic', 'Segoe UI Symbol', serif;

values: font-family: 'BabelStone Runic Beagnoth', 'BabelStone Runic Beorhtnoth', 'BabelStone Runic Beorhtric', 'BabelStone Runic Beowulf', 'BabelStone Runic Berhtwald', 'BabelStone Runic Byrhtferth', Junicode, Kelvinch, 'Free Monospaced', Code2000, Hnias, 'Noto Sans Runic', 'Segoe UI Historic', 'Segoe UI Symbol';

values: font-variant: small-caps; text-transform: lowercase;

values:
/wiki/C_programming_language
mw-redirect
C programming language

values:
/wiki/ICAO_spelling_alphabet
mw-redirect
ICAO spelling alphabet

values: border-left: 1px solid silver; border-top: 1px solid silver; line-height:1.3em; padding:0.3em;

values: border-left: 1px solid silver; border-top: 1px solid silver; border-right: 1px solid silver;

values: border-left: 1px solid silver; padding:0.3em;

values:
plainlinksneverexpand nounderlines
letter-spacing: 0.2em;

values: border-left: 1px solid silver; border-right: 1px solid silver; font-size: large;

values: font-family: monospace; font-weight: bold; line-height: 100%; font-size:150%

values: border-left: 1px solid silver; border-top: 1px solid silver; padding:0.3em;

values: border-left: 1px solid silver; border-right: 1px solid silver; border-top: 1px solid silver; padding:0.3em;

values: border-left: 1px solid silver; border-bottom: 1px solid silver; padding-bottom:0.3em;

values: border-left: 1px solid silver; border-bottom: 1px solid silver;

values: border-left: 1px solid silver; border-right: 1px solid silver; border-bottom: 1px solid silver;

values:
/wiki/XX_(disambiguation)
mw-redirect mw-disambig
XX (disambiguation)

values:
/wiki/XXX_(disambiguation)
mw-redirect mw-disambig
XXX (disambiguation)

values:
/wiki/XXXX_(disambiguation)
mw-redirect mw-disambig
XXXX (disambiguation)

values:
nofollow
external text
http://www.dizionario.rai.it

values:
/wiki/The_American_Cyclop%C3%A6dia
mw-redirect
The American Cyclopædia

values:
/wiki/Template_talk:Latin_alphabet/main
mw-redirect
Template talk:Latin alphabet/main

values:
/wiki/Classical_Latin_alphabet
mw-redirect
Classical Latin alphabet

values:
/wiki/Cz_(digraph)
mw-redirect
Cz (digraph)

values: Western Latin character sets (computing)

values: List of precomposed Latin characters in Unicode

values: nowraplinks hlist collapsible expanded navbox-inner

values: Category:CS1 Italian-language sources (it)

values: Category:Wikipedia indefinitely move-protected pages

values: Category:All articles with unsourced statements

values: Category:Articles with unsourced statements from July 2013

values: Category:Articles containing Basque-language text

values: Category:Articles containing Dutch-language text

values: Category:Articles containing French-language text

values: Category:Wikipedia articles incorporating a citation from The American Cyclopaedia with a Wikisource reference

values: Discussion about edits from this IP address [ctrl-alt-n]

values: A list of edits made from this IP address [ctrl-alt-y]

values: You are encouraged to create an account and log in; however, it is not mandatory

values: You're encouraged to log in; however, it's not mandatory. [ctrl-alt-o]

values:
/wiki/X
View the content page [ctrl-alt-c]
c

values: Discussion about the content page [ctrl-alt-t]

values: p-namespaces navigation vectorTabs p-namespaces-label

values:
p-variants
navigation
vectorMenu emptyPortlet
p-variants-label

values:
/w/index.php?title=X&action=edit
Edit this page [ctrl-alt-e]
e

values: Past revisions of this page [ctrl-alt-h]

values: p-views navigation vectorTabs p-views-label

values:
p-cactions
navigation
vectorMenu emptyPortlet
p-cactions-label

values:
mw-wiki-logo
/wiki/Main_Page
Visit the main page

values:
/wiki/Main_Page
Visit the main page [ctrl-alt-z]
z

values: Featured content – the best of Wikipedia

values: Find background information on current events

values:
/wiki/Special:Random
Load a random article [ctrl-alt-x]
x

values: portal navigation p-navigation p-navigation-label

values: Guidance on how to use and edit Wikipedia

values: About the project, what you can do, where to find things

values: A list of recent changes in the wiki [ctrl-alt-r]

values: portal navigation p-interaction p-interaction-label

values: List of all English Wikipedia pages containing links to this page [ctrl-alt-j]

values: Recent changes in pages linked from this page [ctrl-alt-k]

values:
/wiki/Wikipedia:File_Upload_Wizard
Upload files [ctrl-alt-u]
u

values: A list of all special pages [ctrl-alt-q]

values: Permanent link to this revision of the page

values: Link to connected data repository item [ctrl-alt-g]

values: Printable version of this page [ctrl-alt-p]

values: portal navigation p-wikibase-otherprojects p-wikibase-otherprojects-label

values:
uls-settings-trigger
Language settings
0
button
true

values:
https://ace.wikipedia.org/wiki/X
X – Achinese
ace
ace
interlanguage-link-target

values:
https://af.wikipedia.org/wiki/X
X – Afrikaans
af
af
interlanguage-link-target

values:
https://als.wikipedia.org/wiki/X
X – Alemannisch
als
als
interlanguage-link-target

values:
https://am.wikipedia.org/wiki/X
X – Amharic
am
am
interlanguage-link-target

values:
https://ar.wikipedia.org/wiki/X
X – Arabic
ar
ar
interlanguage-link-target

values:
https://an.wikipedia.org/wiki/X
X – Aragonese
an
an
interlanguage-link-target

values:
https://arc.wikipedia.org/wiki/X
X – Aramaic
arc
arc
interlanguage-link-target

values:
https://ast.wikipedia.org/wiki/X
X – Asturian
ast
ast
interlanguage-link-target

values:
https://gn.wikipedia.org/wiki/X
X – Guarani
gn
gn
interlanguage-link-target

values:
https://az.wikipedia.org/wiki/X
X – Azerbaijani
az
az
interlanguage-link-target

values:
https://azb.wikipedia.org/wiki/X
X – South Azerbaijani
azb
azb
interlanguage-link-target

values:
https://zh-min-nan.wikipedia.org/wiki/X
X – Chinese (Min Nan)
zh-min-nan
zh-min-nan
interlanguage-link-target

values: X (літара) – Belarusian (Taraškievica orthography)

values:
https://bg.wikipedia.org/wiki/X
X – Bulgarian
bg
bg
interlanguage-link-target

values:
https://ca.wikipedia.org/wiki/X
X – Catalan
ca
ca
interlanguage-link-target

values:
https://cv.wikipedia.org/wiki/X
X – Chuvash
cv
cv
interlanguage-link-target

values:
https://cs.wikipedia.org/wiki/X
X – Czech
cs
cs
interlanguage-link-target

values:
https://co.wikipedia.org/wiki/X
X – Corsican
co
co
interlanguage-link-target

values:
https://cy.wikipedia.org/wiki/X
X – Welsh
cy
cy
interlanguage-link-target

values:
https://da.wikipedia.org/wiki/X
X – Danish
da
da
interlanguage-link-target

values:
https://de.wikipedia.org/wiki/X
X – German
de
de
interlanguage-link-target

values:
https://et.wikipedia.org/wiki/X
X – Estonian
et
et
interlanguage-link-target

values:
https://el.wikipedia.org/wiki/X
X – Greek
el
el
interlanguage-link-target

values:
https://es.wikipedia.org/wiki/X
X – Spanish
es
es
interlanguage-link-target

values:
https://eo.wikipedia.org/wiki/X
X – Esperanto
eo
eo
interlanguage-link-target

values:
https://eu.wikipedia.org/wiki/X
X – Basque
eu
eu
interlanguage-link-target

values:
https://fa.wikipedia.org/wiki/X
X – Persian
fa
fa
interlanguage-link-target

values:
https://fo.wikipedia.org/wiki/X
X – Faroese
fo
fo
interlanguage-link-target

values:
https://fy.wikipedia.org/wiki/X
X – Western Frisian
fy
fy
interlanguage-link-target

values:
https://fur.wikipedia.org/wiki/X
X – Friulian
fur
fur
interlanguage-link-target

values:
https://ga.wikipedia.org/wiki/X
X – Irish
ga
ga
interlanguage-link-target

values:
https://gd.wikipedia.org/wiki/X
X – Scottish Gaelic
gd
gd
interlanguage-link-target

values:
https://gl.wikipedia.org/wiki/X
X – Galician
gl
gl
interlanguage-link-target

values:
https://gan.wikipedia.org/wiki/X
X – Gan Chinese
gan
gan
interlanguage-link-target

values:
https://ko.wikipedia.org/wiki/X
X – Korean
ko
ko
interlanguage-link-target

values:
https://hr.wikipedia.org/wiki/X
X – Croatian
hr
hr
interlanguage-link-target

values:
https://io.wikipedia.org/wiki/X
X – Ido
io
io
interlanguage-link-target

values:
https://ilo.wikipedia.org/wiki/X
X – Iloko
ilo
ilo
interlanguage-link-target

values:
https://id.wikipedia.org/wiki/X
X – Indonesian
id
id
interlanguage-link-target

values:
https://is.wikipedia.org/wiki/X
X – Icelandic
is
is
interlanguage-link-target

values:
https://it.wikipedia.org/wiki/X
X – Italian
it
it
interlanguage-link-target

values:
https://he.wikipedia.org/wiki/X
X – Hebrew
he
he
interlanguage-link-target

values:
https://ka.wikipedia.org/wiki/X
X – Georgian
ka
ka
interlanguage-link-target

values:
https://kw.wikipedia.org/wiki/X
X – Cornish
kw
kw
interlanguage-link-target

values:
https://sw.wikipedia.org/wiki/X
X – Swahili
sw
sw
interlanguage-link-target

values:
https://kv.wikipedia.org/wiki/X
X – Komi
kv
kv
interlanguage-link-target

values:
https://ht.wikipedia.org/wiki/X
X – Haitian Creole
ht
ht
interlanguage-link-target

values:
https://la.wikipedia.org/wiki/X
X – Latin
la
la
interlanguage-link-target

values:
https://lv.wikipedia.org/wiki/X
X – Latvian
lv
lv
interlanguage-link-target

values:
https://lt.wikipedia.org/wiki/X
X – Lithuanian
lt
lt
interlanguage-link-target

values:
https://hu.wikipedia.org/wiki/X
X – Hungarian
hu
hu
interlanguage-link-target

values:
https://mr.wikipedia.org/wiki/X
X – Marathi
mr
mr
interlanguage-link-target

values:
https://ms.wikipedia.org/wiki/X
X – Malay
ms
ms
interlanguage-link-target

values:
https://cdo.wikipedia.org/wiki/X
X – Min Dong Chinese
cdo
cdo
interlanguage-link-target

values:
https://nah.wikipedia.org/wiki/X
X – Nāhuatl
nah
nah
interlanguage-link-target

values:
https://ja.wikipedia.org/wiki/X
X – Japanese
ja
ja
interlanguage-link-target

values:
https://no.wikipedia.org/wiki/X
X – Norwegian
no
no
interlanguage-link-target

values:
https://nn.wikipedia.org/wiki/X
X – Norwegian Nynorsk
nn
nn
interlanguage-link-target

values:
https://nrm.wikipedia.org/wiki/X
X – Norman
nrm
nrm
interlanguage-link-target

values:
https://oc.wikipedia.org/wiki/X
X – Occitan
oc
oc
interlanguage-link-target

values:
https://uz.wikipedia.org/wiki/X_(lotin)
X (lotin) – Uzbek
uz
uz
interlanguage-link-target

values: ਐਕਸ (ਅੰਗਰੇਜ਼ੀ ਅੱਖਰ) – Punjabi

values:
https://pl.wikipedia.org/wiki/X
X – Polish
pl
pl
interlanguage-link-target

values:
https://pt.wikipedia.org/wiki/X
X – Portuguese
pt
pt
interlanguage-link-target

values:
https://ro.wikipedia.org/wiki/X
X – Romanian
ro
ro
interlanguage-link-target

values:
https://qu.wikipedia.org/wiki/X
X – Quechua
qu
qu
interlanguage-link-target

values:
https://sc.wikipedia.org/wiki/X
X – Sardinian
sc
sc
interlanguage-link-target

values:
https://sco.wikipedia.org/wiki/X
X – Scots
sco
sco
interlanguage-link-target

values:
https://stq.wikipedia.org/wiki/X
X – Saterland Frisian
stq
stq
interlanguage-link-target

values:
https://simple.wikipedia.org/wiki/X
X – Simple English
simple
simple
interlanguage-link-target

values:
https://sk.wikipedia.org/wiki/X
X – Slovak
sk
sk
interlanguage-link-target

values:
https://sl.wikipedia.org/wiki/X
X – Slovenian
sl
sl
interlanguage-link-target

values:
https://srn.wikipedia.org/wiki/X
X – Sranan Tongo
srn
srn
interlanguage-link-target

values:
https://sr.wikipedia.org/wiki/X
X – Serbian
sr
sr
interlanguage-link-target

values:
https://su.wikipedia.org/wiki/X
X – Sundanese
su
su
interlanguage-link-target

values:
https://fi.wikipedia.org/wiki/X
X – Finnish
fi
fi
interlanguage-link-target

values:
https://sv.wikipedia.org/wiki/X
X – Swedish
sv
sv
interlanguage-link-target

values:
https://tl.wikipedia.org/wiki/X
X – Tagalog
tl
tl
interlanguage-link-target

values:
https://tt.wikipedia.org/wiki/X
X – Tatar
tt
tt
interlanguage-link-target

values:
https://th.wikipedia.org/wiki/X
X – Thai
th
th
interlanguage-link-target

values:
https://tr.wikipedia.org/wiki/X
X – Turkish
tr
tr
interlanguage-link-target

values:
https://vi.wikipedia.org/wiki/X
X – Vietnamese
vi
vi
interlanguage-link-target

values:
https://vo.wikipedia.org/wiki/X
X – Volapük
vo
vo
interlanguage-link-target

values:
https://war.wikipedia.org/wiki/X
X – Waray
war
war
interlanguage-link-target

values:
https://yi.wikipedia.org/wiki/X
X – Yiddish
yi
yi
interlanguage-link-target

values:
https://yo.wikipedia.org/wiki/X
X – Yoruba
yo
yo
interlanguage-link-target

values:
https://zh-yue.wikipedia.org/wiki/X
X – Cantonese
zh-yue
zh-yue
interlanguage-link-target

values:
https://diq.wikipedia.org/wiki/X
X – Zazaki
diq
diq
interlanguage-link-target

values:
https://bat-smg.wikipedia.org/wiki/X
X – Samogitian
bat-smg
bat-smg
interlanguage-link-target

values:
https://zh.wikipedia.org/wiki/X
X – Chinese
zh
zh
interlanguage-link-target

values: mediawiki ltr sitedir-ltr mw-hide-empty-elt ns-0 ns-subject page-X rootpage-X skin-vector action-view


text:
ISO/IEC 27002
From Wikipedia, the free encyclopedia
Jump to: navigation, search
ISO/IEC 27002 is an information security standard published by the International Organization for Standardization (ISO) and by the International Electrotechnical Commission (IEC), titled Information technology – Security techniques – Code of practice for information security management.
This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed. (January 2013) (Learn how and when to remove this template message)
The ISO/IEC 27000-series standards are descended from a corporate security standard donated by Shell to a UK government initiative in the early 1990s[1] . The Shell standard was developed into British Standard BS 7799 in the mid-1990s, and was adopted as ISO/IEC 17799 in 2000. The ISO/IEC standard was revised in 2005, and renumbered ISO/IEC 27002 in 2007 to align with the other ISO/IEC 27000-series standards. It was revised again in 2013.
ISO/IEC 27002 provides best practice recommendations on information security management for use by those responsible for initiating, implementing or maintaining information security management systems (ISMS). Information security is defined within the standard in the context of the C-I-A triad:
the preservation of confidentiality (ensuring that information is accessible only to those authorized to have access), integrity (safeguarding the accuracy and completeness of information and processing methods) and availability (ensuring that authorized users have access to information and associated assets when required).[2]
Contents
[hide]
1 Outline
1.1 Outline for ISO/IEC 27002:2013
2 Implementation example of ISO/IEC 27002
2.1 Physical and Environmental security
2.2 Human Resource security
2.3 Access control
3 National Equivalent Standards
4 Certification
5 Ongoing development
6 See also
7 References
8 External links
Outline[edit]
Outline for ISO/IEC 27002:2013[edit]
The standard starts with 5 introductory chapters:
0. Introduction
1. Scope
2. Normative references
3. Terms and definitions
4. Structure of this standard
These are followed by 14 main chapters:
5. Information Security Policies
6. Organization of Information Security
7. Human Resource Security
8. Asset Management
9. Access Control
10. Cryptography
11. Physical and environmental security
12. Operation Security- procedures and responsibilities, Protection from malware, Backup, Logging and monitoring, Control of operational software, Technical vulnerability management and Information systems audit coordination
13. Communication security - Network security management and Information transfer
14. System acquisition, development and maintenance - Security requirements of information systems, Security in development and support processes and Test data
15. Supplier relationships - Information security in supplier relationships and Supplier service delivery management
16. Information security incident management - Management of information security incidents and improvements
17. Information security aspects of business continuity management - Information security continuity and Redundancies
18. Compliance - Compliance with legal and contractual requirements and Information security reviews
Within each chapter, information security controls and their objectives are specified and outlined. The information security controls are generally regarded as best practice means of achieving those objectives. For each of the controls, implementation guidance is provided.
Specific controls are not mandated since:
Each organization is expected to undertake a structured information security risk assessment process to determine its specific requirements before selecting controls that are appropriate to its particular circumstances. The introduction section outlines a risk assessment process although there are more specific standards covering this area such as ISO/IEC 27005. The use of information security risk analysis to drive the selection and implementation of information security controls is an important feature of the ISO/IEC 27000-series standards: it means that the generic good practice advice in this standard gets tailored to the specific context of each user organization, rather than being applied by rote. Not all of the 39 control objectives are necessarily relevant to every organization for instance, hence entire categories of control may not be deemed necessary. The standards are also open ended in the sense that the information security controls are 'suggested', leaving the door open for users to adopt alternative controls if they wish, just so long as the key control objectives relating to the mitigation of information security risks, are satisfied. This helps keep the standard relevant despite the evolving nature of information security threats, vulnerabilities and impacts, and trends in the use of certain information security controls.
It is practically impossible to list all conceivable controls in a general purpose standard. Industry-specific implementation guidelines for ISO/IEC 27001:2013 and ISO/IEC 27002 offer advice tailored to organizations in the telecomms industry (see ISO/IEC 27011) and healthcare (see ISO 27799).
Most organizations implement a wide range of information security-related controls, many of which are recommended in general terms by ISO/IEC 27002. Structuring the information security controls infrastructure in accordance with ISO/IEC 27002 may be advantageous since it:
Is associated with a well-respected international standard
Helps avoid coverage gaps and overlaps
Is likely to be recognized by those who are familiar with the ISO/IEC standard
Implementation example of ISO/IEC 27002[edit]
Here are a few examples of typical information security policies and other controls relating to three parts of ISO/IEC 27002. (Note: this is merely an illustration. The list of example controls is incomplete and not universally applicable.)
Physical and Environmental security[edit]
Physical access to premises and support infrastructure (communications, power, air conditioning etc.) must be monitored and restricted to prevent, detect and minimize the effects of unauthorized and inappropriate access, tampering, vandalism, criminal damage, theft etc.
The list of people authorized to access secure areas must be reviewed and approved periodically (at least once a year) by Administration or Physical Security Department, and cross-checked by their departmental managers.
Photography or video recording is forbidden inside Restricted Areas without prior permission from the designated authority.
Suitable video surveillance cameras must be located at all entrances and exits to the premises and other strategic points such as Restricted Areas, recorded and stored for at least one month, and monitored around the clock by trained personnel.
Access cards permitting time-limited access to general and/or specific areas may be provided to trainees, vendors, consultants, third parties and other personnel who have been identified, authenticated, and authorized to access those areas.
Other than in public areas such as the reception foyer, and private areas such as rest rooms, visitors should be escorted at all times by an employee while on the premises.
The date and time of entry and departure of visitors along with the purpose of visits must be recorded in a register maintained and controlled by Site Security or Reception.
Everyone on site (employees and visitors) must wear and display their valid, issued pass at all times, and must present their pass for inspection on request by a manager, security guard or concerned employee.
Access control systems must themselves be adequately secured against unauthorized/inappropriate access and other compromises.
Fire/evacuation drills must be conducted periodically (at least once a year).
Smoking is forbidden inside the premises other than in designated Smoking Zones.
Human Resource security[edit]
All employees must be screened prior to employment, including identity verification using a passport or similar photo ID and at least two satisfactory professional references. Additional checks are required for employees taking up trusted positions.
All employees must formally accept a binding confidentiality or non-disclosure agreement concerning personal and proprietary information provided to or generated by them in the course of employment.
Human Resources department must inform Administration, Finance and Operations when an employee is taken on, transferred, resigns, is suspended or released on long-term leave, or their employment is terminated.
Upon receiving notification from HR that an employee's status has changed, Administration must update their physical access rights and IT Security Administration must update their logical access rights accordingly.
An employee's manager must ensure that all access cards, keys, IT equipment, storage media and other valuable corporate assets are returned by the employee on or before their last day of employment.
Access control[edit]
User access to corporate IT systems, networks, applications and information must be controlled in accordance with access requirements specified by the relevant Information Asset Owners, normally according to the user's role.
Generic or test IDs must not be created or enabled on production systems unless specifically authorized by the relevant Information Asset Owners.
After a predefined number of unsuccessful logon attempts, security log entries and (where appropriate) security alerts must be generated and user accounts must be locked out as required by the relevant Information Asset Owners.
Passwords or pass phrases must be lengthy and complex, consisting of a mix of letters, numerals and special characters that would be difficult to guess.
Passwords or pass phrases must not be written down or stored in readable format.
Authentication information such as passwords, security logs, security configurations and so forth must be adequately secured against unauthorized or inappropriate access, modification, corruption or loss.
Privileged access rights typically required to administer, configure, manage, secure and monitor IT systems must be reviewed periodically (at least twice a year) by Information Security and cross-checked by the appropriate departmental managers.
Users must either log off or password-lock their sessions before leaving them unattended.
Password-protected screensavers with an inactivity timeout of no more than 10 minutes must be enabled on all workstations/PCs.
Write access to removable media (USB drives, CD/DVD writers etc.) must be disabled on all desktops unless specifically authorized for legitimate business reasons.
National Equivalent Standards[edit]
ISO/IEC 27002 has directly equivalent national standards in several countries. Translation and local publication often results in several months' delay after the main ISO/IEC standard is revised and released, but the national standard bodies go to great lengths to ensure that the translated content accurately and completely reflects ISO/IEC 27002.
Countries
Equivalent Standard
Australia
New Zealand
AS/NZS ISO/IEC 27002:2006
Brazil ISO/IEC NBR 17799/2007 – 27002
Indonesia SNI ISO/IEC 27002:2014
Chile NCH2777 ISO/IEC 17799/2000
China GB/T 22081-2008
Czech Republic ČSN ISO/IEC 27002:2006
Croatia HRN ISO/IEC 27002:2013
Denmark DS/ISO27002:2014 (DK)
Estonia EVS-ISO/IEC 17799:2003, 2005 version in translation
Germany DIN ISO/IEC 27002:2008
Japan JIS Q 27002
Lithuania LST ISO/IEC 27002:2009 (adopted ISO/IEC 27002:2005, ISO/IEC 17799:2005)
Netherlands NEN-ISO/IEC 27002:2013
Peru NTP-ISO/IEC 17799:2007
Poland PN-ISO/IEC 17799:2007, based on ISO/IEC 17799:2005
Russia ГОСТ/Р ИСО МЭК 17799-2005
Slovakia STN ISO/IEC 27002:2006
South Africa SANS 27002:2014/ISO/IEC 27002:2013[3]
Spain UNE 71501
Sweden SS-ISO/IEC 27002:2014
Turkey TS ISO/IEC 27002
Thailand UNIT/ISO
Ukraine СОУ Н НБУ 65.1 СУІБ 2.0:2010
United Kingdom BS ISO/IEC 27002:2005
Uruguay UNIT/ISO 17799:2005
Certification[edit]
ISO/IEC 27002 is an advisory standard that is meant to be interpreted and applied to all types and sizes of organization according to the particular information security risks they face. In practice, this flexibility gives users a lot of latitude to adopt the information security controls that make sense to them, but makes it unsuitable for the relatively straightforward compliance testing implicit in most formal certification schemes.
ISO/IEC 27001:2013 (Information technology – Security techniques – Information security management systems – Requirements) is a widely recognized certifiable standard. ISO/IEC 27001 specifies a number of firm requirements for establishing, implementing, maintaining and improving an ISMS, and in Annex A there is a suite of information security controls that organizations are encouraged to adopt where appropriate within their ISMS. The controls in Annex A are derived from and aligned with ISO/IEC 27002.
Ongoing development[edit]
Both ISO/IEC 27001:2013 and ISO/IEC 27002 are revised by ISO/IEC JTC1/SC27 every few years in order to keep them current and relevant. Revision involves, for instance, incorporating references to other issued security standards (such as ISO/IEC 27000, ISO/IEC 27004 and ISO/IEC 27005) and various good security practices that have emerged in the field since they were last published. Due to the significant 'installed base' of organizations already using ISO/IEC 27002, particularly in relation to the information security controls supporting an ISMS that complies with ISO/IEC 27001, any changes have to be justified and, wherever possible, evolutionary rather than revolutionary in nature.
See also[edit]
BS 7799, the original British Standard from which ISO/IEC 17799 and then ISO/IEC 27002 was derived
ISO/IEC 27000-series
IT baseline protection
IT risk management
List of ISO standards
Sarbanes–Oxley Act
Standard of Good Practice published by the Information Security Forum
ISO/IEC JTC 1/SC 27 – IT Security techniques
NIST Cybersecurity Framework
Cyber Risk Quantification
References[edit]
Jump up ^ "ISO27k timeline". ISO27001security.com. IsecT Ltd. Retrieved 9 March 2016.
Jump up ^ "ISC CISSP Official Study Guide". SYBEX. ISBN 978-1119042716. Retrieved 1 November 2016.
Jump up ^ "SANS 27002:2014 (Ed. 2.00)". SABS Web Store. Retrieved 25 May 2015.
External links[edit]
The ISO 17799 Newsletter
ISO/IEC 27002:2013
[show]
v
t
e
ISO standards by standard number
List of ISO standards / ISO romanizations / IEC standards
1–9999
1
2
3
4
5
6
7
9
16
31
-0
-1
-2
-3
-4
-5
-6
-7
-8
-9
-10
-11
-12
-13
128
216
217
226
228
233
259
269
302
306
428
518
519
639
-1
-2
-3
-5
-6
646
690
732
764
843
898
965
1000
1004
1007
1073-1
1413
1538
1745
1989
2014
2015
2022
2047
2108
2145
2146
2240
2281
2709
2711
2788
2848
2852
3029
3103
3166
-1
-2
-3
3297
3307
3602
3864
3901
3977
4031
4157
4217
4909
5218
5428
5775
5776
5800
5964
6166
6344
6346
6385
6425
6429
6438
6523
6709
7001
7002
7098
7185
7200
7498
7736
7810
7811
7812
7813
7816
8000
8178
8217
8571
8583
8601
8632
8652
8691
8807
8820-5
8859
-1
-2
-3
-4
-5
-6
-7
-8
-8-I
-9
-10
-11
-12
-13
-14
-15
-16
8879
9000/9001
9075
9126
9293
9241
9362
9407
9506
9529
9564
9594
9660
9897
9899
9945
9984
9985
9995
10000–19999
10005
10006
10007
10116
10118-3
10160
10161
10165
10179
10206
10218
10303
-11
-21
-22
-28
-238
10383
10487
10585
10589
10646
10664
10746
10861
10957
10962
10967
11073
11170
11179
11404
11544
11783
11784
11785
11801
11898
11940 (-2)
11941
11941 (TR)
11992
12006
12182
12207
12234-2
13211
-1
-2
13216
13250
13399
13406-2
13450
13485
13490
13567
13568
13584
13616
14000
14031
14224
14289
14396
14443
14496
-2
-3
-6
-10
-11
-12
-14
-17
-20
14644
14649
14651
14698
14750
14764
14882
14971
15022
15189
15288
15291
15292
15398
15408
15444
-3
15445
15438
15504
15511
15686
15693
15706
-2
15707
15897
15919
15924
15926
15926 WIP
15930
16023
16262
16612-2
16750
16949 (TS)
17024
17025
17100
17203
17369
17442
17799
18000
18004
18014
18245
18629
18916
19005
19011
19092 (-1
-2)
19114
19115
19125
19136
19439
19500
19501
19502
19503
19505
19506
19507
19508
19509
19510
19600:2014
19752
19757
19770
19775-1
19794-5
19831
20000+
20000
20022
20121
20400
21000
21047
21500
21827:2002
22000
23270
23271
23360
24517
24613
24617
24707
25178
25964
26000
26300
26324
27000 series
27000
27001
27002
27006
27729
28000
29110
29148
29199-2
29500
30170
31000
32000
38500
40500
42010
55000
80000
-1
-2
-3
Category
[show]
v
t
e
Information security certifications
CompTIA
Security+
CSA+
CASP
Cisco Systems
CCNA Security
CCNP Security
CCIE Security
EC-Council
CEH
CNDA
EITCI
EITCA/IS
ISACA
CISA
CISM
CRISC
(ISC)²
CISSP
SSCP
ISSMP
ISSEP
ISSAP
Mile2
CPTE
Offensive Security
OSCP
OSWP
OSCE
OSEE
OSWE
eLearnSecurity
eCPPT
GIAC
GISF
GSEC
GCIA
GCIH
GCUX
GCWN
GCED
GPEN
GWAPT
GAWN
GICSP
G7799
GSNA
GISP
GSLC
GCPM
GSSP-JAVA
GSSP-.NET
GWEB
GCFE
GCFA
GREM
GNFA
GLEG
GSE
[show]
v
t
e
List of International Electrotechnical Commission standards
IEC standards
IEC 60027
IEC 60034
IEC 60038
IEC 60062
IEC 60063
IEC 60068
IEC 60112
IEC 60228
IEC 60269
IEC 60297
IEC 60309
IEC 60320
IEC 60364
IEC 60446
IEC 60559
IEC 60601
IEC 60870
IEC 60870-5
IEC 60870-6
IEC 60906-1
IEC 60908
IEC 60929
IEC 60958
AES3
S/PDIF
IEC 61030
IEC 61131
IEC 61131-3
IEC 61158
IEC 61162
IEC 61334
IEC 61346
IEC 61355
IEC 61400
IEC 61499
IEC 61508
IEC 61511
IEC 61850
IEC 61851
IEC 61883
IEC 61960
IEC 61968
IEC 61970
IEC 62014-4
IEC 62056
IEC 62061
IEC 62196
IEC 62262
IEC 62264
IEC 62304
IEC 62325
IEC 62351
IEC 62365
IEC 62366
IEC 62379
IEC 62386
IEC 62455
IEC 62680
IEC 62682
IEC 62700
ISO/IEC standards
ISO/IEC 646
ISO/IEC 2022
ISO/IEC 4909
ISO/IEC 5218
ISO/IEC 6429
ISO/IEC 6523
ISO/IEC 7810
ISO/IEC 7811
ISO/IEC 7812
ISO/IEC 7813
ISO/IEC 7816
ISO/IEC 7942
ISO/IEC 8613
ISO/IEC 8632
ISO/IEC 8652
ISO/IEC 8859
ISO/IEC 9126
ISO/IEC 9293
ISO/IEC 9592
ISO/IEC 9593
ISO/IEC 9899
ISO/IEC 9945
ISO/IEC 9995
ISO/IEC 10021
ISO/IEC 10116
ISO/IEC 10165
ISO/IEC 10179
ISO/IEC 10646
ISO/IEC 10967
ISO/IEC 11172
ISO/IEC 11179
ISO/IEC 11404
ISO/IEC 11544
ISO/IEC 11801
ISO/IEC 12207
ISO/IEC 13250
ISO/IEC 13346
ISO/IEC 13522-5
ISO/IEC 13568
ISO/IEC 13818
ISO/IEC 14443
ISO/IEC 14496
ISO/IEC 14882
ISO/IEC 15288
ISO/IEC 15291
ISO/IEC 15408
ISO/IEC 15444
ISO/IEC 15445
ISO/IEC 15504
ISO/IEC 15511
ISO/IEC 15693
ISO/IEC 15897
ISO/IEC 15938
ISO/IEC 16262
ISO/IEC 17024
ISO/IEC 17025
ISO/IEC 18000
ISO/IEC 18004
ISO/IEC 18014
ISO/IEC 19752
ISO/IEC 19757
ISO/IEC 19770
ISO/IEC 19788
ISO/IEC 20000
ISO/IEC 21000
ISO/IEC 21827
ISO/IEC 23000
ISO/IEC 23003
ISO/IEC 23008
ISO/IEC 23270
ISO/IEC 23360
ISO/IEC 24707
ISO/IEC 24727
ISO/IEC 24744
ISO/IEC 24752
ISO/IEC 26300
ISO/IEC 27000
ISO/IEC 27000-series
ISO/IEC 27002
ISO/IEC 27040
ISO/IEC 29119
ISO/IEC 33001
ISO/IEC 38500
ISO/IEC 42010
ISO/IEC 80000
Related
International Electrotechnical Commission
Retrieved from "https://en.wikipedia.org/w/index.php?title=ISO/IEC_27002&oldid=822322791"
Categories:
Computer security standards
Information assurance standards
ISO/IEC 27000-series
Hidden categories:
Use British English Oxford spelling from January 2012
Articles needing additional references from January 2013
All articles needing additional references
Navigation menu
Personal tools
Not logged in
Talk
Contributions
Create account
Log in
Namespaces
Article
Talk
Variants
Views
Read
Edit
View history
More
Search
Navigation
Main page
Contents
Featured content
Current events
Random article
Donate to Wikipedia
Wikipedia store
Interaction
Help
About Wikipedia
Community portal
Recent changes
Contact page
Tools
What links here
Related changes
Upload file
Special pages
Permanent link
Page information
Wikidata item
Cite this page
Print/export
Create a book
Download as PDF
Printable version
Languages
Català
Deutsch
Español
فارسی
Français
Bahasa Indonesia
Italiano
日本語
Polski
Русский
Yorùbá
中文
Edit links
This page was last edited on 25 January 2018, at 18:37.
Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may apply. By using this site, you agree to the Terms of Use and Privacy Policy. Wikipedia® is a registered trademark of the Wikimedia Foundation, Inc., a non-profit organization.
Privacy policy
About Wikipedia
Disclaimers
Contact Wikipedia
Developers
Cookie statement
Mobile view
Enable previews

key: html

type: local

value: div

attrs: id class

values: mw-page-base noprint

values: mw-head-base noprint

value: a

attrs: id class lang

values: firstHeading firstHeading en

values: siteSub noprint

values: jump-to-nav mw-jump

value: b

attrs: href title

values: International Organization for Standardization

value: i

value: p

value: img

attrs: href class

attrs: class href

values: Help:Introduction to referencing with Wiki Markup/1

value: span

values: plainlinks metadata ambox ambox-content ambox-Refimprove

values: Edit section: Outline for ISO/IEC 27002:2013

values:
/wiki/ISO/IEC_27005
mw-redirect
ISO/IEC 27005

values:
/wiki/ISO/IEC_27001:2013
mw-redirect
ISO/IEC 27001:2013

values: Edit section: Implementation example of ISO/IEC 27002

values: Edit section: Physical and Environmental security

values: Edit section: National Equivalent Standards

attrs: alt src width height class srcset data-file-width data-file-height

values:
/wiki/ISO/IEC_27004
mw-redirect
ISO/IEC 27004

values:
/wiki/List_of_ISO_standards
mw-redirect
List of ISO standards

values:
/wiki/Standard_of_Good_Practice
mw-redirect
Standard of Good Practice

values:
/wiki/Cyber_Risk_Quantification
mw-redirect
Cyber Risk Quantification

values:
nofollow
external text
http://a.co/59T1pBP

values:
reflist mw-references-wrap
list-style-type: decimal;

values:
nofollow
external text
http://17799-news.the-hamster.com

values:
nofollow
external text
https://www.iso.org/standard/54533.html

values: List of International Organization for Standardization standards

values:
/wiki/List_of_IEC_standards
mw-redirect
List of IEC standards

values:
/wiki/British_standard_pipe_thread
mw-redirect
British standard pipe thread

values: Language Of Temporal Ordering Specification

values: Guidelines for the Definition of Managed Objects

values: Document Style Semantics and Specification Language

values: Tag Image File Format / Electronic Photography

values: Delivery Multimedia Integration Framework

values:
/wiki/MPEG-4_Part_12
mw-redirect
MPEG-4 Part 12

values: International Standard Identifier for Libraries and Related Organizations

values: International Standard Audiovisual Number

values: International Standard Musical Work Code

values:
/wiki/Simple_feature_access
mw-redirect
Simple feature access

values: Common Object Request Broker Architecture

values: Cloud Infrastructure Management Interface

attrs: alt src title width height srcset data-file-width data-file-height

values: nowraplinks hlist collapsible autocollapse navbox-inner

values: Template talk:Information Security Certifications

values: List of Computer Security Certifications

values: European Information Technologies Certification Institute

values: European Information Technologies Certification Academy

values: Certified in Risk and Information Systems Control

values: Certified Information Systems Security Professional

values: Information Systems Security Management Professional

values: Information Systems Security Engineering Professional

values: Information Systems Security Architecture Professional

values: CPTE Certified Penetration Testing Engineer

values: Offensive Security Certified Professional

values: Offensive Security Wireless Professional (page does not exist)

values: Offensive Security Certified Expert (page does not exist)

values: Offensive Security Exploitation Expert (page does not exist)

values: Offensive Security Web Expert (page does not exist)

values: ELearnSecurity Certified Professional Penetration Tester

values: Global Information Assurance Certification

values: nowraplinks collapsible autocollapse navbox-inner

values: Template:List of International Electrotechnical Commission standards

values: Template talk:List of International Electrotechnical Commission standards

values: Category:Use British English Oxford spelling from January 2012

values: Category:Articles needing additional references from January 2013

values: Category:All articles needing additional references

values: Discussion about edits from this IP address [ctrl-alt-n]

values: A list of edits made from this IP address [ctrl-alt-y]

values: You are encouraged to create an account and log in; however, it is not mandatory

values: You're encouraged to log in; however, it's not mandatory. [ctrl-alt-o]

values:
/wiki/ISO/IEC_27002
View the content page [ctrl-alt-c]
c

values: Discussion about the content page [ctrl-alt-t]

values: p-namespaces navigation vectorTabs p-namespaces-label

values:
p-variants
navigation
vectorMenu emptyPortlet
p-variants-label

values: Past revisions of this page [ctrl-alt-h]

values: p-views navigation vectorTabs p-views-label

values:
p-cactions
navigation
vectorMenu emptyPortlet
p-cactions-label

values:
mw-wiki-logo
/wiki/Main_Page
Visit the main page

values:
/wiki/Main_Page
Visit the main page [ctrl-alt-z]
z

values: Featured content – the best of Wikipedia

values: Find background information on current events

values:
/wiki/Special:Random
Load a random article [ctrl-alt-x]
x

values: portal navigation p-navigation p-navigation-label

values: Guidance on how to use and edit Wikipedia

values: About the project, what you can do, where to find things

values: A list of recent changes in the wiki [ctrl-alt-r]

values: portal navigation p-interaction p-interaction-label

values: List of all English Wikipedia pages containing links to this page [ctrl-alt-j]

values: Recent changes in pages linked from this page [ctrl-alt-k]

values:
/wiki/Wikipedia:File_Upload_Wizard
Upload files [ctrl-alt-u]
u

values: A list of all special pages [ctrl-alt-q]

values: Permanent link to this revision of the page

values: Link to connected data repository item [ctrl-alt-g]

values: Printable version of this page [ctrl-alt-p]

values:
uls-settings-trigger
Language settings
0
button
true

values: ایزو ۲۷۰۰۲ – Persian

values: /static/images/wikimedia-button-1.5x.png 1.5x, /static/images/wikimedia-button-2x.png 2x

values: /static/images/poweredby_mediawiki_132x47.png 1.5x, /static/images/poweredby_mediawiki_176x62.png 2x

values:
suggestions
display: none; font-size: 13px;

values: mediawiki ltr sitedir-ltr mw-hide-empty-elt ns-0 ns-subject page-ISO_IEC_27002 rootpage-ISO_IEC_27002 skin-vector action-view