ISO 27001

ISO 27001 Clause 10.2 Continual Improvement

ISO 27001 Clause 10.2 Continual Improvement

Required Activity ISO 27001 Clause 10.2 Continual Improvement, The organization continually improves the suitability, adequacy and effectiveness of the ISMS. Why organization needs to have continual improvement? Organizations are never static, nor their contexts. In addition, the threats to the information systems, and the ways in which they can be compromised, are rapidly changing. At the end of the day, there’s no ISMS which remains perfect; it always needs to be set on continual improvement; …

ISO 27001 Clause 10.2 Continual Improvement Read More »

Information security risk

ISO 27001 Clause 8.1, Clause 8.2, Clause 8.3 Operational planning & control

ISO 27001 Clause 8.1, Clause 8.2, Clause 8.3 Operational planning & control, This article will explain related all these things etc. Required activity The organization plans, implements and controls the processes to satisfy its information security requirements and to realize its information security objectives. The organization keeps documented information as necessary to possess confidence that processes are administered as planned. The organization controls planned changes and reviews the results of unintended changes, and ensures that …

ISO 27001 Clause 8.1, Clause 8.2, Clause 8.3 Operational planning & control Read More »

iso-5.2-infosavvy

ISO 27001 Implementation Guideline Clause 5.2 Policy

Required activity ISO 27001 Implementation Guideline Clause 5.2 Policy, Top management establishes an information security policy. Explanation The information security policy describes the strategic importance of the ISMS for the organization and is out there as documented information. The policy directs information security activities within the organization.The policy states what the requirements for information security are within the actual context of the organization. The information security policy should contain brief, high level statements of intent …

ISO 27001 Implementation Guideline Clause 5.2 Policy Read More »

overview-of-cyber-security-frameworks

Overview of Cyber security Frameworks

Cyber security Framework provides a policy framework of computer security guidance for how private sector organizations can assess and improve their ability to prevent, detect, and respond to cyber attacks. Overview Overview of Cyber security Frameworks has been in limelight for over few years due to the continual cyber attacks that are happening. Well allow us to understand what Cyber-Security is normally and perceive what’s the most use of its implementation. Cyber security is nothing however a typical method, a bunch of technologies …

Overview of Cyber security Frameworks Read More »