<Benchmark xmlns:cpe='http://cpe.mitre.org/XMLSchema/cpe/1.0' xmlns:dsig='http://www.w3.org/2000/09/xmldsig#' resolved='false' xmlns:xsi='http://www.w3.org/2001/XMLSchema-instance' id='ISO27001' xmlns:cdf='http://checklists.nist.gov/xccdf/1.1' xmlns:xhtml='http://www.w3.org/1999/xhtml' xml:lang='en' xmlns:dc='http://purl.org/dc/elements/1.1/' xmlns='http://checklists.nist.gov/xccdf/1.1'>
  <status date='2007-01-09'>draft</status>
  <title xml:lang='en'>Windows ISO 27001 Benchmark - Deprecated</title>
  <description xml:lang='en'>beta content</description>
  <notice id='Terms-Of-Use' xml:lang='en'>This document may be copied and used subject to the NIST terms of use (http://www.nist.gov/public_affairs/disclaim.htm)</notice>
  <front-matter xml:lang='en'>ISO/IEC 27001 is an information security management system (ISMS) standard published in October 2005 by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). Its full name is ISO/IEC 27001:2005 - Information technology -- Security techniques -- Information security management systems -- Requirements but it is commonly known as "ISO 27001". 
  <xhtml:p />It is intended to be used in conjunction with ISO/IEC 27002, the Code of Practice for Information Security Management, which lists security control objectives and recommends a range of specific security controls. Organizations that implement an ISMS in accordance with the best practice advice in ISO/IEC 27002 are likely simultaneously to meet the requirements of ISO/IEC 27001 but certification is entirely optional.</front-matter>
  <rear-matter xml:lang='en' />
  <reference>
    <dc:title>Title for Default Benchmark</dc:title>
    <dc:creator>Benchmark Editor</dc:creator>
    <dc:publisher>McAfee</dc:publisher>
    <dc:identifier>http://csrc.nist.gov/</dc:identifier>
  </reference>
  <version>0.6</version>
  <model system='urn:xcscoring:default' />
  <model system='urn:xcscoring:flat' />
</Benchmark>
