ISO 27001 – Information Security Management System (ISMS) ISO 27001 (formally known as ISO/IEC 27001:2005) is a specification for an information security management system (ISMS). An ISMS is a framework of policies and procedures that includes all legal, physical and technical controls involved in an organisation's information risk management processes. According to its documentation, ISO 27001 was developed to "provide a model for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an information security management system." ISO 27001 uses a topdown, risk-based approach and is technology-neutral. The specification defines a six-part planning process: · Define a security policy. · Define the scope of the ISMS. · Conduct a risk assessment. · ...
Pakistan Management System Certification work as PMS Certification is considered as one of the fastest growing certification body for ISO Certification like 9001:2015 (Quality Management System), 14001:2015 (Environment Management System), ISO 27001:2013 (Information Security Management System), ISO 22000:2005 (Food Safety Management System), ISO 50000:2011 (Energy Management System), ISO 20000:2011 (IT Management System), and OHSAS 18001:2007 (Occupational Health and Safety Management System).
Comments
Post a Comment