2. Establishment and management of the ISMS" phase
2.1 Determining scope and policy
ISMS planning involves defining the scope and limits of the organization's activity (its location, assets, technologies). The scope of the ISMS thus includes :
the general orientation of the WSIS and the principles of action of the information security policy ;
requirements linked to the organization's activity and its legal and regulatory constraints (for example: confidentiality and secrecy of customer information in the banking sector);
the ISMS must be linked to the company's overall risk management logic (strategic and global risk management), operating on the basis of precise risk assessment criteria and having been approved by...
Exclusive to subscribers. 97% yet to be discovered!
Already subscribed? Log in!
Establishment and management of the ISMS" phase
ISMS implementation and operation" phase
Article included in this offer
"Environment"
(
516 articles
)
Updated and enriched with articles validated by our scientific committees
A set of exclusive tools to complement the resources
Bibliography
Exclusive to subscribers. 97% yet to be discovered!
Already subscribed? Log in!
