ISMS FAQ

It is an international standard that defines the requirements for the implementation, implementation, optimization and continuous improvement of the information security management system.

ISMS is an information security management system. It is a methodological manual that contains guidelines, policies, goals, work procedures and processes for a management system. Its purpose is to set up processes in the organization so that security is maximally enhanced and risks are minimized. The standard also deals with how to minimize the impact of security breaches and security risks.

No. Any organization that manages data, i.e. assets that are valuable to the company will use this standard. In short, wherever it makes sense to protect sensitive data, you will apply the ISO 27001 standard.

There are a number of benefits of ISO 27001. A certified security management system increases the value of the organization and creates trust between clients and business partners. It is also a competitive advantage.

It allows you to declare a high standard of information security. The technical and procedural benefits certainly include the elimination of risks to which the company is exposed, safer information management, and property protection.

If your business is built on information assets that need to be protected, yes. The implementation of ISMS security rules, as well as ISO 27001 certification can be obtained regardless of the size of the organization. It doesn't matter the industry or size. Of course, with a small organization, everything will be easier than with large companies.

ISO / IEC 27002 defines guidelines for the implementation of ISMS requirements, which are given in ISO 27001.

ISO 27001 specifies 114 points (measures) that can be used to eliminate security risks. ISO 27002 provides recommendations and guidance on how to implement these requirements.

The final difference is in the certification. Organizations can be certified according to ISO 27001, but not according to ISO 27002.

ISO 27002 was formerly referred to as ISO / IEC 17799 and was based on the British standard BS 7799-1. So you can come across this name as well, but it is already an invalid standard.