ISO/IEC 27001:2005 ISMS
A pre-requisite for Sustainable, directed and continual Improvement
ISO/IEC 27001 is Information Security Management System. Security breaches create a risk for the enterprise. Hence, Certification to ISMS is advantageous to the organization.
Information is essential to an organization’s business and consequently needs to be suitably protected. This is essentially important in the increasingly interconnected business environment. As a result of this increasing interconnectivity, information is now exposed to a wide variety of threats and vulnerabilities
Information security is the protection of information from a wide range of threats in order to ensure :
- Business continuity
- Minimize business risk &
- Maximize return on investments and business opportunities.
Information security will function as a enabler to avoid or reduce relevant risks.
Often information security management systems are challenged to demonstrate how security policies provide tangible benefits to business operations. For a effective information security management systems the approach in the organization is to align security and business goals, which enables organizational personnnel how information security adds value to business operations.
The approach to Information Security:
ISO/IEC 27001 sets out the requirements for an Information Security Management System (ISMS) and the Plan-Do-Check-Act security management cycle. The Annex A of the standard provides a comprehensive set of 133 information security controls regarding 11 aspects of security areas for any organization.
Implementing a world-class ISMS in the organization and get it certified are definitely a competitive advantage. On the other hand, possessing the necessary knowledge and proven techniques to implement an ISMS that is compliant with the requirements of ISO/IEC 27001 distinguishes yourself from the other organizations.
