Page 4 - Magazine.indt

The ISO/IEC 27000 family of standards is used to measure, provide, and operate the Information Security Management Systems for any type of organization(s). This can apply to organizations such as government agencies, commercial enterprises, or even non-proft organizations. An ISM system is loaded with various benefts, if you are able to establish, implement, operate, monitor, review, maintain, and improve the system properly.

Successfully implementing ISMS will require you to perform several crucial tasks.

• The authority of an organization must be made aware of the need for security of the information. • They must understand that they are responsible for informational security.

• The management should be committed and promote productive values.

• There should be appropriate controls in place for risk assessment.

• There should be active detection and prevention of any and all information security incidents (you should remember that reassessment of information security should be continual and must be modifed continuously as well).

By implementing the ISMS into your organization, you will reap a direct beneft from the overall reduction in security risks (which is made possible by reducing the

get support for any course of action that they try to

• They can get support for implementing cost-effective and comprehensive ISMS that will suit all the needs of an organization.

• They will also get support to operate and maintain the implemented ISMS.

• To successfully run and maintain the security system, the organization will receive structuring assistance for developing a suitable approach. • The organization will also learn more about risk management and governance.

• They will also learn how to educate and train other business and system owners. • The ISMS provides necessary education and training for the holistic management of information security.

The ISMS standards also promote good information security practices that are globally followed and accepted. Utilizing ISMS will grant authority to an organization to help maintain their security system by minimizing potential risks (in the face of external and internal changes).

Another important beneft is that an ISO/IEC

certifed organization is better positioned to present information to customers, buyers, and consumers. Most buyers prefer to see some type of ISO/IEC certifcation before they opt to spend their money. This type of certifcation removes the need for a

consumers, which is extremely time consuming and