This document outlines an information security management standard with 18 sections and 114 controls organized under 14 groups. The standard provides guidance on security policies, asset management, access control, cryptography, physical security, operations, systems development, supplier relationships, communications, incident management, business continuity, and compliance. It was authored by Jason P. Rusch and references ISO/IEC 27001 and 27002 for information security standards.

1. ISO:IEC
27001:27002
Information Security Management Standard
0 Introduction
01 - Scope
02 - Normative references
03 - Terms and definitions
Authored by; Jason P. Rusch
04 - Context of organization
05 - Leadership
06 - Planning
07 - Support
08 - Operation
10 – Improvement
09 – Performance evaluation
SECURITY POLICIES
ORGANIZATION OF INFORMATION SECURITY
HUMAN RESOURCES SECURITY
ASSET MANAGEMENT
ACCESS CONTROL
CRYPTOGRAPHY
PHYSICAL AND ENVIRONMENTAL SECURITY
OPERATIONS SECURITY
INFORMATION SYSTEMS ACQUISITION, DEVELOPMENT/MAINTENANCE
SUPPLIER RELATIONSHIPS
COMMUNICATIONS SECURITY
(11)
(10)
(12)
(13)
(14)
(15)
(09)
(08)
(07)
(06)
(05)
INFORMATION SECURITY INCIDENT MANAGEMENT
(16)
INFORMATION SECURITY ASPECTS OF BUSINESS CONTINUITY
(17)
COMPLIANCE
(18)
(2)
(7)
(6)
(10)
(14)
(2)
(15)
(14)
(7)
(13)
(5)
(7)
(4)
(8)
114 controls in 14 groups
27002:201327001:2013