information security management system ISMS implementation

What is the job of Chief Information Security Officer (CISO)

Since ISO 27001 does not require the CISO, it does not prescribe what this person should do. Generally, this person should coordinate all the activities related to securing the information in a company, and here are some ideas on what this person could do.

What is the job of Chief Information Security Officer (CISO)

How to define context of the organization according to ISO 27001

What must you consider for information security to help achieve business objectives? Since the release of the 2013 revision of ISO 27001, its clause 4.1 requiring the identification of the organizational context has been [...]

How to define context of the organization according to ISO 27001

How to identify interested parties according to ISO 27001

One of the hot questions these days is related to clause 4.2 in ISO 27001 – Understanding the needs and expectations of interested parties. Actually, their identification is not so complicated, and it gives crucial input for developing your information security management system (ISMS).

How to identify interested parties according to ISO 27001

Explanation of ISO 27001

What is ISO 27001 ? Information security systems are often regarded by organizations as simple checklists or policies and procedures that deny them a lot of things, far from the way they do their normal business. By sticking to these beliefs, organizations prevent themselves from properly building an ISMS (Information Security Management System) and achieving its full potential, either in operational and financial performance, or marketing reputation.

Explanation of ISO 27001