Optimizing ISO/IEC 27001:2013 using O-ISM3

This Guide is aimed at users of the well-established ISO/IEC 27001 Information Security Management Standard, to explain how The Open Group O-ISM3 Standard (C102) complements and extends ISO/IEC 27001 by adding further security management controls and applying security performance metrics. These extend the capability of the ISO/IEC 27001 Information Security Management System (ISMS) so that it will deliver specific measurements on ISMS performance against target business security objectives, so optimizing informed decision-making on cost-effective ISMS investment that aligns with an organization's business objectives.