Conclusion

Among the many forms of malicious damage an organization can suffer, one of the most critical is undoubtedly a breach of information security. Such attacks can jeopardize an organization's long-term survival by attacking its "internal memory", its primary source of added value.

With this in mind, the aim of the ISMS is to ensure that the organization's information is as secure as possible, in a spirit of continuous improvement.

Applying such a standard within the organization will help protect corporate information by formalizing processes, implementing actions to secure and manage IT risk (and risks arising from this type of operational risk), as well as training and awareness-raising, and risk traceability through documentation and formalization/recording of evidence.

The ISMS, in application of the