this title covers the implementation issues of the information security standards up to and including audits. pivotal to this it covers the installation of an isms, or information security management system. this is defined as 'that part of the overall management system, based on a business risk approach, to establish, implement, operate, monitor, review, maintain and improve information security. the management system includes organisational structure, policies, planning activities, responsibilities, practices, procedures, processes and resources.' .
effective information security is defined in the standard as the 'preservation of confidentiality, integrity and availability of information.' it cannot be achieved through technological means alone, and should never be implemented in a way that is either out of line with the organisation's approach to risk or which undermines or creates difficulties for its business operations. ...
|
内容加载中，请稍后...
商品评论（0条）