Information technology – Security techniques – Information security management systems – Overview and vocabulary
With more and more organizations implementing information security management systems (ISMS) as part of their risk management strategy, the publication of a new ISO/IEC standard giving an overview of ISMS is particularly timely.
ISO/IEC 27000:2009, Information technology – Security techniques – Information security management systems – Overview and vocabulary, will assist organizations of all types to understand the fundamentals, principles and concepts to improve protection of their information assets.
Applicable to all types and sizes of organization (e.g. commercial enterprises, government agencies, non-profit organizations), ISO/IEC 27000:2009 supplements the ISO/IEC 27000 family of standards by providing an introduction to information security management and defining related terms.
Today, an organization’s information assets are dependent upon information and communications technology. The technology assists in facilitating the creation, processing, storing, transmitting, protection and destruction of information.
As the extent of the interconnected global business environment expands, so does the requirement to protect information as it is exposed to a wider variety of threats and vulnerabilities.
Edward Humphreys, convenor of the working group, which developed the standard, comments:
Standardized security techniques are becoming mandatory requirements for e-commerce, health-care, telecoms, automotive and many other application areas in both the commercial and government sectors. ISO/IEC 27000:2009, together with the other ISO/IEC 27000 family of standards, aims to assist organizations more effectively achieve an appropriate level of information security.
ISO/IEC 27000:2009, Information technology – Security techniques – Information security management systems – Overview and vocabulary was developed by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommittee SC 27, IT Security techniques.
For further information please call us or visit ISO web page at www.iso.org
Source: www.iso.org date 29 May 2009.
- Crisis management (6)
- ECM (49)
- EMS / Compliance Program (5)
- Energy Management (2)
- Environmental management (15)
- Environmental Violation (19)
- EPA (4)
- EU Commission (3)
- EU Environmental Regulatory Updates (12)
- European Maritime Safety Agency (5)
- Events (3)
- Hot News (6)
- Incident Management Exercise (1)
- OPA 90 and other US requirements (5)
- Paris Mou Port State Control (9)
- Pollution prevention (15)
- Press Review (9)
- Quality management (7)
- Regulatory Updates (6)
- Risk management (4)
- Safety management (6)
- Security Circular Letters (6)
- Seminars (11)
- Training (11)
- US Regulatory Updates (16)
- USCG Activites (9)