Understanding the organization and its context
Required activity The organization determines external and internal issues relevant to its purpose and affecting its ability to realize the intended outcome(s) of the knowledge security management system (ISMS) . Explanation As an integral function of the ISMS, the organization continually analyses itself and therefore the world surrounding it. This analysis cares with external and internal issues that in how affect information security and the way information security are often managed, which are relevant to the organization’s objectives. Analysis of those issues has three purposes: — Understanding the context so as to make a decision the scope of the ISMS; — Analyzing the context so as to work out risks and opportunities; — Ensuring that the ISMS is tailored to changing external and internal issues. External issues are those outside of the organization’s control. this is often mentioned because the organization’s environment. Analyzing this environment can incl...