http___www.itsm.hr_baza-znanja_information-security-iso-27001-baza-znanja__1.xml
1.1 2.1 2.2 3.1 4.1 4.2 4.3 4.4 5.1 5.2 5.3 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1
Implementing ISO/IEC 27001 Information Security Management Secure your valuable information assets by applying ISO/IEC 27001 to your business. Work with us to build an information security management system (ISMS) designed for your specific needs. Are you ready for implementation? Each business has a unique set of data to manage and equally unique security risks to manage. And each organization is at a different stage with their information security management. That’s why we offer customized packages to help you put information security first. An ISO/IEC 27001 package can include only the products and services that your business needs. We can help you to cut the cost of unnecessary products or services, and overcome the particular challenges you face. We’ll help you shape an ISO/IEC 27001 Project Plan with the systems you already have in place. And we’ll make sure that security becomes paramount to the way you operate, whatever stage you’re at. Top tips for implementing ISO/IEC 27001 - Get commitment and support from senior management. - Engage the whole business with good internal communication. - Compare existing information security management with ISO/IEC 27001 requirements. - Get customer and supplier feedback on current information security. - Establish an implementation team to get the best results. - Map out and share roles, responsibilities and timescales. - Adapt the basic principles of the ISO/IEC 27001 standard to your business. - Motivate staff involvement with training and incentives. - Share ISO/IEC 27001 knowledge and encourage staff to train as internal auditors. - Regularly review your ISO/IEC 27001 system to make sure you are continually improving it.
1.1 2.1 3.1 3.2 4.1 4.2
Information Security / ISO 27001 – Baza znanja Pronađite mnoštvo korisnih Information Security/ ISO 27001 resursa ( posteri, infografike, primjeri ispita, vodiči, webinari…). ISMS – Information Security Management Information System obuhvaća uspostavu i održavanje sustava informacijske sigurnosti koji osigurava menadžmentu upravljanje rizicima informacijskih sustava i ujedno povećava sigurnost poslovanja. ISO/IEC 27000 je porodica standarda informacijske sigurnosti. ISO/IEC 27001:2013 definira zahtjeve za uspostavu sustava upravljanja informacijskom sigurnošću. ISO/IEC 27001:2013 određuje potrebe za utemeljenje, implementaciju, nadzor i pregled te održavanje i poboljšanje sustava upravljanja; tj. okvir za upravljanje rizicima informacijske sigurnosti organizacije.