Case studies show value of ISO/IEC 27001 conformity

摘要

Organizations today are required to conform or comply with many different laws and regulations, industry norms and practices, internal auditing standards and matters of corporate governace. ISO/IEC 27001:2005, Information technology - Security techniques - Information security management systems - Requirements, has become the benchmark for most information security management system standards (ISMS) and the International Standard for achieving compliance with such requirements. This is because the standard is flexible enough to meet the needs of small, medium-sized and large organizations with applicability to all business sectors,governments, academic and charitable institutions (see Figure 1, overleaf).