Meryam Sahin (talk | contribs) No edit summary |
Meryam Sahin (talk | contribs) No edit summary |
||
| (2 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
{{Textbox|boxtype=note|header=About this handbook|text=The ISO 27001 handbook includes all chapters of the currrent ISO 27001:2015 chapters. | |||
Your organization can use it to prepare for certifications or to create a QM handbook that is specific to your organization's information security management.|icon=no}} | |||
ISO 27001 specifies the requirements for: | ISO 27001 specifies the requirements for: | ||
* establishing, | * establishing, | ||
| Line 5: | Line 9: | ||
* maintaining, and | * maintaining, and | ||
* continually improving | * continually improving | ||
an '''Information Security Management System (ISMS)'''. | an '''Information Security Management System (ISMS)'''. | ||
It also clarifies that the standard is applicable to any organization, regardless of size, type, or industry, and includes requirements for assessing and treating information security risks tailored to the organization’s needs. | It also clarifies that the standard is applicable to any organization, regardless of size, type, or industry, and includes requirements for assessing and treating information security risks tailored to the organization’s needs. | ||
Latest revision as of 14:23, 22 June 2026
About this handbookThe ISO 27001 handbook includes all chapters of the currrent ISO 27001:2015 chapters.
Your organization can use it to prepare for certifications or to create a QM handbook that is specific to your organization's information security management.
ISO 27001 specifies the requirements for:
- establishing,
- implementing,
- maintaining, and
- continually improving
an Information Security Management System (ISMS).
It also clarifies that the standard is applicable to any organization, regardless of size, type, or industry, and includes requirements for assessing and treating information security risks tailored to the organization’s needs.
