ISO 27001
ISO 27001 Certification - Information Security Management System
ISO 27001 is the leading international standard focused on
information security that was developed to help organizations, of
any size or any industry, to protect their information in a
systematic and cost-effective way, through the adoption of an
Information Security Management System. An Information Security
Management System (ISMS) is a set of rules that a company needs to
establish to:
-
Identify stakeholders and their expectations of the company in
terms of information security. •Identify which risks exist for the
information.
-
Define controls (safeguards) and other mitigation methods to meet
the identified expectations and handle risks.
-
Set clear objectives on what needs to be achieved with information
security.
- Implement all the controls and other risk treatment method.
-
Make continuous improvement to make the whole ISMS work better.
This set of rules can be written down in the form of policies,
procedures, and other types of documents, or it can be in the form
of established processes and technologies that are not documented.
ISO 27001 defines which documents are required, i.e., which must
exist at a minimum.