Definition[]
An Information Security Management System (ISMS) is
| “ | a systematic and structured approach to managing information so that it remains secure. ISMS implementation includes policies, processes, procedures, organizational structures and software and hardware functions. The ISMS implementation should be directly influenced by the organization's objectives, security requirements, processes employed, size and structure.[1] | ” |
References[]
- ↑ CNII Portal, "Information Security Management System" (full-text).
See also[]
- ISO/IEC 27001:2005: Information Security Management Systems-Requirements
- ISO/IEC 27002:2005: Code of Practice for Information Security Management
- ISO/IEC 27004:2009: Information Security Management-Measurement
- ISO/IEC 27005:2008: Information Security Risk Management