7/28/2019 ISO 27001-2005 Awareness

1/14

ISO 27001:2005

Information Security Standard

A brief Overview

7/28/2019 ISO 27001-2005 Awareness

2/14

Information

Information is an asset which, like other important business assets,

has value to an organization and consequently needs to be suitably

protected.

Printed or written on paper

Stored electronically

Transmitted by mail or electronic means

Spoken in conversations

7/28/2019 ISO 27001-2005 Awareness

3/14

7/28/2019 ISO 27001-2005 Awareness

4/14

Achieving Information Security 4 Ps of Information Security

7/28/2019 ISO 27001-2005 Awareness

5/14

3 Basic Principles for ISMS

Confidentiality

Integrity

Availability

Ensuring that information

is accessible only to thoseauthorised to have access.

Safeguarding the accuracy

and completeness of

information and processingmethods.

Ensuring that authorised

users have access to

information and associatedassets when required.

7/28/2019 ISO 27001-2005 Awareness

6/14

ISMS Relationships

2006 IBM Corporation

Information

Assets

Integrity

11 Domains of ISO27001

Procedural

Peopl

e

Physical

T

echnical

7/28/2019 ISO 27001-2005 Awareness

7/14

11 Domains of ISO 27001

1. Security Policy2. Organization of Information Security3. Asset Management4. Human Resources Security5. Physical & Environmental Security6. Access Control7. Communications & Operations Management8. Information Systems acquisition, development and maintenance9. Compliance10. Business Continuity Management11. Information Security Incident management

7/28/2019 ISO 27001-2005 Awareness

8/14

What is ISO 27001?

International Standard for Information Security Management

Specifications for Information Security Management

Code of practice for Information Security Management

Can be Certified by Certification Bodies

Applicable to all industry sectors

7/28/2019 ISO 27001-2005 Awareness

9/14

ISO 27001 Drivers

Corporate Governance

Increased Risk Awareness

Competition

Customer Expectation

Market Expectation

Market Image

Legislative drivers

Reasons for seeking Certification according to BSI-DISC Survey

7/28/2019 ISO 27001-2005 Awareness

10/14

Few Benefits of Compliance

Effective Controls of Information Security

Market Differentiation

Confidence to trading partners,stakeholders andcustomers

ONLY standard with global acceptance

Legislative Compliance

7/28/2019 ISO 27001-2005 Awareness

11/14

ISO 27001:2005 PDCA

7/28/2019 ISO 27001-2005 Awareness

12/14

ISO 27001 can be..

Without genuine support from the top- a Failure

Without proper implementation-a burden

With full support,proper implementation and

ongoing commitment

a major benefit

7/28/2019 ISO 27001-2005 Awareness

13/14

7/28/2019 ISO 27001-2005 Awareness

14/14

THANK YOU