4. ISMS monitoring and review" phase
4.1 Monitoring procedures
-
Performance evaluation (clause 9)
Once this measurement method is in place, you need to measure accordingly. It's important to report these results regularly to the people in charge of evaluating them.
-
Surveillance (clause 9.1)
The best way to describe how measures are evaluated is through the policies and procedures that define each measure; normally, this description can be written at the end of each document, and such a description defines the type of KPI (key performance indicator) that must be measured for each measure or group of measures. Findings :
no notion of security...
The Ultimate Scientific and Technical Reference
This article is included in
Safety and risk management
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
ISMS monitoring and review" phase
ISMS update and improvement" phase
Bibliography
Websites
Site dedicated to ISO 27001 :
Website dedicated to IT Governance:
http://www.itgovernance.eu/c-17-iso27001
Site dedicated to ISO 27001 certification (LSTI) :
Standards and norms
- Lignes directrices pour l'audit des systèmes de management de la qualité et/ou de management environnemental. - ISO/IEC 19011 - 2012
- Quality management systems – Requirements - ISO 9001 - 2015
- Environmental management systems – Requirements and guidelines for use. - ISO 14001 - 2015
- Conformity assessment – Requirements for bodies providing audit and certification of management systems – Part 1:...
Directory
Organizations – Federations – Associations (non-exhaustive list)
ISO :
AFNOR :
CLUb de la Sécurité de l'Information Français (CLUSIF) :...
The Ultimate Scientific and Technical Reference
