# ISO/IEC 27004:2009 — Withdrawn and superseded ISO standards

For ISO/IEC 27004:2009, item title is Information technology — Security techniques — Information security management — Measurement; status code is 9599; successor is ISO/IEC 27004:2016; withdrawn / published date is 2009-12-07, recorded from its source on 2026-08-05.

- **Identifier:** ISO/IEC 27004:2009 _(verified: appears in the quote below)_
- **Item title:** Information technology — Security techniques — Information security management — Measurement _(verified: appears in the quote below)_
- **Status code:** 9599 _(verified: appears in the quote below)_
- **Successor:** ISO/IEC 27004:2016
- **Withdrawn / published date:** 2009-12-07 _(verified: appears in the quote below)_

## What the source says

> 42106,IS,,ISO/IEC 27004:2009,Information technology — Security techniques — Information security management — Measurement,Technologies de l'information — Techniques de sécurité — Management de la sécurité de l'information — Mesurage,2009-12-07,1,"['35.030','03.100.70']",ISO/IEC JTC 1/SC 27,9599,,[64120],['en'],55,"<p>ISO/IEC 27004:2009 provides guidance on the development and use of measures and measurement in order to assess the effectiveness of an implemented information security management system (ISMS) and controls or groups of controls, as specified in ISO/IEC 27001.</p><p>ISO/IEC 27004:2009 is applicable to all types and sizes of organization.</p>"

## Source

- https://isopublicstorageprod.blob.core.windows.net/opendata/_latest/iso_deliverables_metadata/csv/iso_deliverables_metadata.csv

Last verified: 2026-08-05. Review by: 2027-02-01.
Part of [Withdrawn and superseded ISO standards](https://referencesource.org/iso-standard-supersessions/).