Efficiency and productivity are discussed in many contexts. In information security management, it also makes sense to ensure processes are working effectively. But how do you measure whether your information security is effective and whether it is developing in the right direction?

It has been eight years since the ISO 27001 standard was last revised but now changes are coming.