ISO27001:2005, what is it? ISO 27001 is a business management system focusing on information security. It is now the benchmark for companies to demonstrate compliance with legislation, customer confidentiality and information integrity.
· Do you hold Information you rely on? · Do you have information that needs to be kept confidential? · Do you collect personal information (Customers, Employees)? · Does your business rely on IT for daily activities? Can you afford reputation damage, commercial and punitive losses, business interruption and or loss of confidential information? ISO27001:2005 · An Information Security Management System for protecting customer information and data from unauthorized use and disclosure.· Centres around the three concepts of Data Confidentiality, Integrity and Availability · Requires Risk assessment and management of all information assets · Defines both Physical (building) and Logical (computer/network) security controls as dictated by the results of the risk assessmentRequires Business continuity management and disaster recovery | |||||||