Article | REF: G9062 V2

ISO 27001: Information Security Management Systems

Author: Gilles TENEAU

Publication date: April 10, 2018 | Lire en français

You do not have access to this resource.
Click here to request your free trial access!

Already subscribed? Log in!

Automatically translated using artificial intelligence technology (Note that only the original version is binding) > find out more.

    A  |  A

    3. ISMS implementation and operation" phase

    The organization must describe and implement a risk management policy that identifies the actions to be taken, and the dedicated personnel and resources. Responsibilities must also be defined, as well as risk priorities (unacceptable risks to be dealt with first).

    • Responsibilities: Leadership (clause 5)

      Already existing Chapter 5 modified "management responsibilities" / "leadership". Change of vocabulary register for management responsibilities to ensure, lead and support, promote and communicate, rather than establish, decide, determine, provide and evaluate. A manager is needed to ensure ISMS compliance and effectiveness.

    • Policy (clause 5.2)

      The Information Security Policy is generally a short, high-level document describing the...

    You do not have access to this resource.

    Exclusive to subscribers. 97% yet to be discovered!

    You do not have access to this resource.
    Click here to request your free trial access!

    Already subscribed? Log in!


    The Ultimate Scientific and Technical Reference

    A Comprehensive Knowledge Base, with over 1,200 authors and 100 scientific advisors
    + More than 10,000 articles and 1,000 how-to sheets, over 800 new or updated articles every year
    From design to prototyping, right through to industrialization, the reference for securing the development of your industrial projects

    This article is included in

    Environment

    This offer includes:

    Knowledge Base

    Updated and enriched with articles validated by our scientific committees

    Services

    A set of exclusive tools to complement the resources

    Practical Path

    Operational and didactic, to guarantee the acquisition of transversal skills

    Doc & Quiz

    Interactive articles with quizzes, for constructive reading

    Subscribe now!

    Ongoing reading
    ISMS implementation and operation" phase