ISMS

ISMS (Information Security Management System) is a structured system for managing, monitoring and continuously improving information security in an organization.

An information security management system includes policies, processes and controls to ensure the protection of information. Risks are identified, appropriate security measures are defined and regularly reviewed.

An ISMS is used to systematically record and control security-related information and measures. The aim is to permanently ensure the confidentiality, integrity and availability of information. For this purpose, information values are first identified and potential risks are analyzed. These risks are assessed and specifically reduced by appropriate measures. All steps and measures are documented and checked regularly. The ISMS thus supports continuous risk management and follows a continuous improvement process in which security measures are adapted in order to be able to react to new threats and requirements.

Examples

• Company defines security policies for data
• Conducting a security risk audit
• Implementation of ISO 27001 standards
• Control of access rights to corporate data