Proceedings

ISMS Process
(Source: Applying ISO 27000 in business strategies)
4.2. Managing the implementation of ISMS according to ISO 27001
An ISMS (Information Security Management System) is a management system based
on a systemic approach to the risks to which the company is exposed to and aims to
establish, implement, operate, monitor, review, maintain and improve information
security policies, information systems and personnel.
Entities which considered that the information in the framework of the activities and
not only, must be protected, should have a management system to control the risks
arising from all levels of access. According to the ISO 27001 (ISACA, 2008), keeping
information by implementing a management system and certification of information
security, it will represent the business card of the organization for customers and
business partners.
~ 673 ~