ISO/CEI 27001

ISO/CEI 27001 is an international standard of Management system of the safety of information, published in October 2005 by the ISO whose title is Technologies information - Techniques of safety - Management systems of safety of information - Requirements .

Utility

The standard ISO 27001 described how to set up a System of Safety management of Information (SMSI). The SMSI is intended to choose the security measures in order to ensure the protection of the credits of a company on a definite perimeter. It is the model of quality PDCA (Plane C Check Act) which must be followed to establish a SMSI.

The ISO/CEI 27001 defines the whole of the tests and controls to carry out to make sure of the good respect of ISO/CEI 27002 (in the past ISO/CEI 17799). The appendix has standard is made up of 133 security measures classified in 11 chapters of safety. As for the standards ISO 9001 and ISO 14001, it is possible to be made certify ISO 27001.

Around the standard

There exists a whole series of standards associated with the ISO 27001 which helps with the implementation of a SMSI.

For the experts, ISO/CEI 27001 is with BS7799: 2002 Leave 2 what ISO/CEI 17799 is with BS7799: 1999 Leave 1.

References

ISO/CEI 17799:2005
BS 7799-2: 2002

See too

Requirements
Standard
Safety of information
Information system security
List of ISO standards by fields
economic ITSEC
Intelligence

External bonds

British Standards Institute
official Description of standard ISO/IEC 27001:2005
International Group of the Users ISO 27001 (English)

Random links: