Information security management systems for small and medium-sized enteprises

摘要

ISO/IEC 27001:2005, Information technology - Security techniques - Information security management systems - Requirements, is one of a family of information security management systems (ISMS) standards (see box) for use by all organizations regardless of size and sector. Well over 5000 organizations have already certified their ISMS in conformity with ISO/ IEC 27001, and many more are in process of doing so - testimony to its broad applicability in helping protect business assets and information, and the reason why the ISMS strandard has become the common information security language within and between many different types of enterprise.