Sertifikasi
QMS | ISO 9001:2015EMS | ISO 14001:2015ISO 45001:2018ISO 21001:2018ISO / IEC 27000:2018ABMS | ISO 37001FSMS | ISO 22000ISMS | ISO 27001ISO / EIC 20000-1:2018ISMS | ISO 27001
Tujuan dari standar itu sendiri adalah untuk "menyediakan model untuk mendirikan, pelaksanaan, operasi, pemantauan, meninjau, mempertahankan dan meningkatkan sistem manajemen keamanan informasi". Mengenai adopsi, ini harus menjadi keputusan strategis. Lebih lanjut, "desain dan implementasi SMKI dalam suatu organisasi terpengaruh oleh kebutuhan mereka dan tujuan, persyaratan keamanan, proses yang digunakan dan ukuran dan struktur organisasi".
Standar ini mendefinisikan 'pendekatan proses' sebagai "Penerapan sistem proses dalam sebuah organisasi, bersamaan dengan identifikasi dan interaksi proses ini, beserta manajemen mereka". Standar inimenggunakan PDCA, siklus Plan-Do-Check-Action pada struktur proses, juga mencerminkan prinsip-prinsip yang ditetapkan dalam pedoman OECG (Lembaga Bantuan Nirlaba untuk pencapaian kinerja dasar).
The purpose of the standard itself is to "provide a model for establishing, implementing, operating, monitoring, reviewing, maintaining and improving information security management systems". Regarding adoption, this should be a strategic decision. Furthermore, "the design and implementation of SMKI within an organization is affected by their needs and objectives, security requirements, processes used and the size and structure of the organization".
This standard defines a 'process approach' as "The application of process systems within an organization, along with the identification and interaction of these processes, and their management". This standard uses PDCA, the Plan-Do-Check-Action cycle on process structures, also reflecting the principles set out in the OECG (Nonprofit Assistance Institute for basic performance achievement) guidelines.
Standar ini mendefinisikan 'pendekatan proses' sebagai "Penerapan sistem proses dalam sebuah organisasi, bersamaan dengan identifikasi dan interaksi proses ini, beserta manajemen mereka". Standar inimenggunakan PDCA, siklus Plan-Do-Check-Action pada struktur proses, juga mencerminkan prinsip-prinsip yang ditetapkan dalam pedoman OECG (Lembaga Bantuan Nirlaba untuk pencapaian kinerja dasar).
The purpose of the standard itself is to "provide a model for establishing, implementing, operating, monitoring, reviewing, maintaining and improving information security management systems". Regarding adoption, this should be a strategic decision. Furthermore, "the design and implementation of SMKI within an organization is affected by their needs and objectives, security requirements, processes used and the size and structure of the organization".
This standard defines a 'process approach' as "The application of process systems within an organization, along with the identification and interaction of these processes, and their management". This standard uses PDCA, the Plan-Do-Check-Action cycle on process structures, also reflecting the principles set out in the OECG (Nonprofit Assistance Institute for basic performance achievement) guidelines.