ISO/IEC 27002:2013 - Information technology - Security techniques - Code of practice for information security controls is an international standard that provides a set of practical recommendations and general guidelines for managing security measures in the field of information security.