IT Management & Cyber Security

Required activity Top management establishes an  information security   policy. Explanation The information security policy describes the strategic importance of the ISMS for the organization and is out there as  documented information . The policy directs information security activities within the organization.The policy states what the requirements for information security are within the actual context of the organization. The information security policy should contain brief, high level statements of intent and direction concerning information security. It is often specific to the scope of an ISMS or can have wider coverage. All other policies, procedures, activities and objectives associated with information security should be aligned to the knowledge security policy. The information security policy should reflect the organization’s business situation, culture, issues and concerns concerning information security. The extent of the  knowledge secur...

Information Security Management System  ISO 27001   Standard is an Information Security Management System. The main objective of this standard is the organization shall establish, implement and maintain the information security system within the organization. Evaluate the information security Risk at each stage of operation and take the necessary action to reduce the information security Risk within the organization. In common business practice the ISO 27001 standard is also referred as ISMS standard. The summarized requirement details of ISO 27001 are given below: Context of The Organization The organization shall identify the internal and external issue related to  information security , including the legal, regulatory and contractual requirements. Determining the scope of information security management system and establishing the information security management system. Leadership The top management of the organization demonstrates the leadership and ...