Packet Sniffing
What is Packet Sniffing?
The practice of intercepting and examining data packets as they traverse a network. Packet sniffing can be used legitimately for network troubleshooting or maliciously to capture sensitive information.
Frameworks that govern packet sniffing
What the standards actually require on packet sniffing
Requirements naming packet sniffing across 2 standards, quoted from the control text.
Extends ISO/IEC 27002:2013 16.1.1. Every information security incident leads the processor, inside its incident management process, to check whether PII has been breached (the text refers to A.9.1, the first edition's number for the breach notification control...
iso-27018-2019::16.1.1 · Responsibilities and procedures →Extends ISO/IEC 27002:2022 5.26. Each information security incident leads the processor, inside its incident management process, to check whether PII has been breached (then A.10.1 applies).
iso-iec-27018-2025::5.26 · Response to information security incidents →Questions people ask about packet sniffing
What is Packet Sniffing?
Why is Packet Sniffing important for compliance?
Which compliance frameworks address Packet Sniffing?
Where can I learn more about Packet Sniffing?
See how Packet Sniffing applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.