# ISO/IEC 27009:2016 — Withdrawn and superseded ISO standards

For ISO/IEC 27009:2016, item title is Information technology — Security techniques — Sector-specific application of ISO/IEC 27001 — Requirements; status code is 9599; successor is ISO/IEC 27009:2020; withdrawn / published date is 2016-06-16, recorded from its source on 2026-08-05.

- **Identifier:** ISO/IEC 27009:2016 _(verified: appears in the quote below)_
- **Item title:** Information technology — Security techniques — Sector-specific application of ISO/IEC 27001 — Requirements _(verified: appears in the quote below)_
- **Status code:** 9599 _(verified: appears in the quote below)_
- **Successor:** ISO/IEC 27009:2020
- **Withdrawn / published date:** 2016-06-16 _(verified: appears in the quote below)_

## What the source says

> 42508,IS,,ISO/IEC 27009:2016,Information technology — Security techniques — Sector-specific application of ISO/IEC 27001 — Requirements,Technologies de l'information — Techniques de sécurité — Application de l’ISO/IEC 27001 à un secteur spécifique — Exigences,2016-06-16,1,['35.030'],ISO/IEC JTC 1/SC 27,9599,,[73907],['en'],9,"<p>ISO/IEC 27009:2016 defines the requirements for the use of ISO/IEC 27001 in any specific sector (field, application area or market sector). It explains how to include requirements additional to those in ISO/IEC 27001, how to refine any of the ISO/IEC 27001 requirements, and how to include controls or control sets in addition to ISO/IEC 27001:2013, Annex A.</p><p>It e

## Source

- https://isopublicstorageprod.blob.core.windows.net/opendata/_latest/iso_deliverables_metadata/csv/iso_deliverables_metadata.csv

Last verified: 2026-08-05. Review by: 2027-02-01.
Part of [Withdrawn and superseded ISO standards](https://referencesource.org/iso-standard-supersessions/).