Meryam Sahin (talk | contribs) m 1 revision imported |
Meryam Sahin (talk | contribs) No edit summary |
||
| Line 1: | Line 1: | ||
ISO 27001 specifies the requirements for: | |||
* Establishing | |||
* Implementing | |||
* Maintaining | |||
* Continually improving | |||
an '''Information Security Management System (ISMS)'''. | |||
It also clarifies that the standard is '''applicable to any organization''', regardless of size, type, or industry, and includes requirements for '''assessing and treating information security risks''' tailored to the organization’s needs. | |||
Revision as of 11:03, 19 June 2026
ISO 27001 specifies the requirements for:
- Establishing
- Implementing
- Maintaining
- Continually improving
an Information Security Management System (ISMS).
It also clarifies that the standard is applicable to any organization, regardless of size, type, or industry, and includes requirements for assessing and treating information security risks tailored to the organization’s needs.
