Scribd Logo
Upload

Welcome to Scribd!

  • ISO 27001 Outlook

    Uploaded by

    Gani Hartato
    15 views3 pages
    The document discusses the ISO 27001 standard for information security management systems, outlining its key areas including management commitment, risk analysis and measures, information security controls, and compliance. It provides an overview of establishing an information security policy, conducting risk assessments, implementing controls related to access management, disruption prevention, and monitoring, and ensuring effectiveness is evaluated through techniques like gap analysis and internal audits. The purpose of ISO 27001 is to help organizations protect sensitive information through a systematic approach to identifying and managing cybersecurity risks.

    Original Description:

    Copyright

    © © All Rights Reserved

    Available Formats

    PPTX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document discusses the ISO 27001 standard for information security management systems, outlining its key areas including management commitment, risk analysis and measures, information security controls, and compliance. It provides an overview of establishing an information security policy, conducting risk assessments, implementing controls related to access management, disruption prevention, and monitoring, and ensuring effectiveness is evaluated through techniques like gap analysis and internal audits. The purpose of ISO 27001 is to help organizations protect sensitive information through a systematic approach to identifying and managing cybersecurity risks.

    Copyright:

    © All Rights Reserved
    Download as PPTX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pptx, pdf, or txt
    15 views3 pages

    ISO 27001 Outlook

    Uploaded by

    Gani Hartato
    The document discusses the ISO 27001 standard for information security management systems, outlining its key areas including management commitment, risk analysis and measures, information security controls, and compliance. It provides an overview of establishing an information security policy, conducting risk assessments, implementing controls related to access management, disruption prevention, and monitoring, and ensuring effectiveness is evaluated through techniques like gap analysis and internal audits. The purpose of ISO 27001 is to help organizations protect sensitive information through a systematic approach to identifying and managing cybersecurity risks.

    Copyright:

    © All Rights Reserved
    Download as PPTX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pptx, pdf, or txt
    of 3

    ISO 27001

    Summary & Outlook (Compliance)


    Content Related ISO
    Organization
    People Control
    Management
    9001 Physical Objectives
    Technologies

    Term &
    Conditions
    Potential
    Information Effects
    Drafting Document
    Security ISO 27001 ISMS Document
    Control Information

    Effectiveness
    Techniques
    GAP Analysis
    Internal Implementation
    Audit Risk Research
    Risk
    Management
    Policy
    1. The Purposes of Organization Management Commitment
    2. Information security objectives 1. Approve the ISMS Policy
    3. Setting information Security 2. Ensure security goals and objectives (Included
    4. Commitment to satisfy applicable Planning)
    requirements & continual 3. Setup IS position and Assign Roles,
    improvement ISMS Responsibilities and Authorities
    5. Communicate within Organization 4. Define level of Risk Acceptance Potential
    5. Trigger / Execute ISMS Reviews Effects
    Risk Analysis & Measures
    a. Potential of Risk
    Access b. Impact of Risk (Scale 1-10)
    Disruption c. Mitigating Control and Measures
    Security Incidents d. Post Control (%)
    People & Staff e. Residual Risk
    f. Effectiveness
    Risk Treatment Decision

    Information Security & Control


    Firewall a. Threat Intelligence (CIA)
    User account b. Information Security
    Prevention c. ICT business continuity
    SSL (Secure Socket Layers) d. Physical security monitoring
    Single Sign-On (SSO) e. Configuration management
    Privacy Compliance, etc. f. Monitoring Activities

    You might also like