supernav-iconAccess + Control | GRC Evolves at Drataverse Digital
Contact Sales
Drata Wordmark Black
  • Solutions
    • Platform
      • Startup
      • Scale
      • Audit Hub
      • Trust Center
      • Risk Management
      • Open API
      • Integrations
    • Frameworks
      • Cyber Essentials
      • SOC 2
      • ISO 27001
      • HIPAA
      • GDPR
      • Custom Frameworks
      • All Frameworks
    • SOC 2 Compliance: A Beginner's Guide
      Access the Guide
      SOC 2 Guide
  • Resources
    • Resources
      • Blog
      • Events
      • Webinars
      • Reports
      • Compliance Glossary
      • Community
      • API Documentation
    • Featured
      • Cloud Service Provider's Guide to FedRAMP
      • Navigating Fintech Risk and Compliance
      • A Start-to-Finish Guide on SOC 2 Compliance
      • A Complete Guide to Cybersecurity Risk Management
    • Witness our latest product updates at this virtual event including a new way to customize and automate user access review and control.
      Register Now
      Drataverse Oct. 2023
  • Auditors
  • Customers
  • Company
    • Company
      • Careers
      • Auditors
      • Partners
      • Press
      • Security
      • Contact Us
    • Drata Named One of the Best Workplaces in Technology
      Read More
      Drata Linkedin Global Nav
  • Sign In
  • Get Started
  • Sign In
  • Get Started
HomeCompliance GlossaryISO 27004:2016

ISO 27004:2016

Join the thousands of companies that trust Drata

See All Case Studies
Abnormal Logo
Airbase
BambooHR Logo
Clearco Logo
Clearbit Logo
Superhuman
Lemonade Logo
Fivetran Logo
Notion Logo
Vercel Logo
Wordpress VIP
Calendly Logo

View Drata Glossary

Learn more about other compliance and cybersecurity concepts in our glossary.

Read More

ISO 27004 is an international standard that provides guidelines for measuring information security. It’s part of the ISO 27000 series of standards, which provide guidelines and best practices for information security management. ISO 27004 focuses specifically on the measurement of information security performance and effectiveness.


It provides guidance on selecting appropriate metrics and indicators to measure the performance of an organization's information security management system (ISMS) and how to use this information to improve the ISMS. The standard is intended to help organizations evaluate the effectiveness of their information security efforts and make informed decisions about how to allocate their resources for maximum benefit.

Drata Wordmark White

Drata is a security and compliance automation platform that continuously monitors and collects evidence of a company’s security controls, while streamlining workflows to ensure audit-readiness.

Solutions

StartupScaleEnhanceDrata PlatformIntegrations
Frameworks
Cyber EssentialsSOC 2ISO 27001HIPAAGDPRCustom FrameworksAll Frameworks
Resources
BlogEventsWebinarsReportsCompliance GlossaryCommunityAPI Documentation
Company
Careers
HIRING
CustomersAuditorsPartnersPressContact Us
Trust
Security and ComplianceTrust CenterSystem Status
Become a Trusted Newsletter Insider

The latest security and compliance news, delivered.


© 2023 Drata Inc. All rights reserved.

Privacy PolicyGDPRTermsCookiesDisclosure PolicySub-processorsData Processing Addendum