Create your own web pages in minutes...
Lets Grow Together.............
Copyright (2007) ZQAPL All Rights Reserved.
ISO 27001 : 2005 Information Security Management System
Your core business processes are supported by information systems. Any disruption in the information quality, quantity, distribution or relevance puts your business at risk. That's why you need to actively manage the security of your information systems and business-critical information.
The first step is to define the scope of ISMS policy. It is also critical to identify the dangers you face and decide a systematic approach how to assess the risks. Once this has been done, a successful ISMS includes standard steps for implementation, operation, review, maintenance and improvement of the system.
ISO/IEC 27001:2005 covers twelve sections:
- Security Policy
- Organization of Information Security
- Asset Management
- Human Resources Security
- Physical and Environmental Security
- Communications and Operations
- Management
- Access Control
- Information Systems Acquisition, Development and Maintenance
- Information Security Incident Management
- Business Continuity Management
- Compliance
Certification motivates your organisation and demonstrates the credibility of your ISMS towards external stakeholders.