International Standards and  OR&A™

BS EN ISO 27001 -  Information Security Management Systems (ISMS)
As one of the most widely used security frameworks around the world, ISO 27001 is a risk-driven standard that focuses on data confidentiality, integrity, and availability. The standard aims to help organizations have a stronger, more holistic approach to data security. .

This systematic risk based approach to information security management can provide assurance to senior management that information is stored securely and protected against unauthorised access by:

— Defining responsibilities and business processes for information security,

— Builds a culture of information security and diligence

— Reduces the potential for security incidents through implemented controls specific to your unique risks and assets,

— Meets additional security compliance requirements
 

This International Standard, like other International Standards, is not intended to increase or change an organization’s legal requirements.

ISO 27001 focuses on the development and maintenance of an Information Security Management System (ISMS). In order to earn an ISO 27001 certification, organizations must implement all of the clauses and controls of the framework within the scope of its ISMS. The organization will then be issued a pass or fail of the audit. Organizations would need to implement, maintain and continually improve the ISMS in order to achieve an ISO 27001 certification.

The standard focuses on ISMS and provides a framework to protect sensitive information through risk management processes. ISO 42001, however, deals with AI management systems. This standard includes responsibilities specific to AI, such as ethical considerations and impact assessments.

©  OR&A™