Meryam Sahin (talk | contribs) No edit summary |
Meryam Sahin (talk | contribs) No edit summary |
||
| Line 1: | Line 1: | ||
ISO 27001 specifies the requirements for: | ISO 27001 specifies the requirements for: | ||
* | * establishing, | ||
* | * implementing, | ||
* | * maintaining, and | ||
* | * continually improving | ||
an '''Information Security Management System (ISMS)'''. | an '''Information Security Management System (ISMS)'''. | ||
It also clarifies that the standard is | It also clarifies that the standard is applicable to any organization, regardless of size, type, or industry, and includes requirements for assessing and treating information security risks tailored to the organization’s needs. | ||
Revision as of 11:03, 19 June 2026
ISO 27001 specifies the requirements for:
- establishing,
- implementing,
- maintaining, and
- continually improving
an Information Security Management System (ISMS).
It also clarifies that the standard is applicable to any organization, regardless of size, type, or industry, and includes requirements for assessing and treating information security risks tailored to the organization’s needs.
