ISO 27001 – Information Technology Security Management

Many organizations take information security measures or controls to protect their information, information assets and business processes.

However, without a formally specified information security management system (ISMS), these controls are inclined towards disorganization and disconnection, since they are mostly implemented as ad hoc temporary solutions to certain situations.

In this white paper, PECB will discuss the main points of ISO 27001, including:

• Context of the Organization (Clause 4),
• Leadership (Clause 5),
• Planning (Clause 6),
• Support (Clause 7),
• Operation (Clause 8),
• Performance Evaluation (Clause 9)
• Links with other standards and guidelines.