ANSI/INCITS/ISO/IEC 27001-2005

View contents.

This International Standard has been prepared to provide a model for establishing, implementing, operating,monitoring, reviewing, maintaining and improving an Information Security Management System (ISMS). Theadoption of an ISMS should be a strategic decision for an organization. The design and implementation of anorganizations ISMS is influenced by their needs and objectives, security requirements, the processesemployed and the size and structure of the organization. These and their supporting systems are expected tochange over time. It is expected that an ISMS implementation will be scaled in accordance with the needs ofthe organization, e.g. a simple situation requires a simple ISMS solution.

People Who Bought This Also Bought:
ISO/IEC 17799:2005- Information technology - Security techniques - Code of practice for information security managementISO/IEC TR 19791:2006- Information technology - Security techniques - Security assessment of operational systemsISO/IEC 27005:2008- Information technology - Security techniques - Information security risk managementISO/IEC TR 18044:2004- Information technology - Security techniques - Information security incident managementISO/IEC 15816:2002- Information technology - Security techniques - Security information objects for access controlISO/IEC 15408-1:2005- Information technology - Security techniques - Evaluation criteria for IT security - Part 1: Introduction and general modelISO/IEC 13335-1:2004- Information technology - Security techniques - Management of information and communications technology security - Part 1: Concepts and models for information and communications technology security managementISO/IEC TR 13335-4:2000- Information technology - Guidelines for the management of IT Security - Part 4: Selection of safeguardsISO/IEC 18045:2005- Information technology - Security techniques - Methodology for IT security evaluationISO/IEC 18043:2006- Information technology - Security techniques - Selection, deployment and operations of intrusion detection systems