EVS-ISO/IEC 27032:2024

ISO/IEC 27032 focuses on addressing Internet security issues and providing guidance for addressing common Internet security threats, such as social engineering attacks, zero-day attacks, privacy attacks, hacking and the proliferation of malicious software (malware), spyware and other potentially unwanted software. ISO/IEC 27032 guidance provides technical and non-technical controls for addressing Internet security risks, including controls for preparing for attacks, preventing attacks, detecting and monitoring attacks and responding to attacks.

ISO/IEC 27032 provides:

— an explanation of the relationship between Internet security, web security, network security and cybersecurity,
— an overview of Internet security,
— identification of interested parties and a description of their roles in Internet security,
— high-level guidance for addressing common Internet security issues.