1. Learn Your Information Security Management System

2. What is ISO 27001:2013?
ISO Information Security Management Systems is the international best practice standard for information security. ISO 27001:2013, the current version of the standard, provides a set of standardized requirements for an information security management system (ISMS). ISO certification is suitable for any organization, large or small and in any sector. 

3. What is ISMS? Information Security Management System
Strategic decision of an organization
Design and implementation
Needs and objectives
Security requirements
Processes employed
Size and structure of the organization
Scaled with ‘needs’ – simple situation requires a simple ISMS solution

4. Concept of Information Security
Protecting Information Resources and Systems
Unauthorized Use and Access
Unauthorized Disclosure and Modification
Damage and Destruction

5. Why ISO 27001 Family Standard
While the ISO/IEC document gives general requirements for an ISMS and is the auditable standard for Information Security Management Systems, there are a family of supporting documents behind it that provide guidelines for planning, implementing, and maintaining an effective ISMS. Below we’ve listed some of these documents, along with their purpose.

6. Where ISO 27001 standard is applicable?
This standard is applicable in many types of industry and few areas where Certified organizations in ISO are:
Finance and Insurance
Software development
Data processing
Banks and hospitals
Telecommunications
Utilities
Retail Sectors
Manufacturing sector
Various service industries
Transportation sector
Government bodies

7. What is ISO 27001 Planning Process?
Define a security policy.
Define the scope of the ISMS.
Conduct a risk assessment.
Manage identified risks.
Select control objectives and controls to be implemented.
Prepare a statement of applicability.

8. Requirements of ISO 27001:2013 ISMS
Highlights and features
Risk management approach
Risk assessment
Risk treatment
Management decision making
Continuous improvement model
Measures of effectiveness
Auditable specification (internal and external ISMS
auditing)
Now under revision

9. Requirements of ISO 27001:2013 Documents
The scope of the ISMS
The ISMS policy
Procedures for document control, internal audits, and procedures for corrective and preventive actions
All other documents, depending on applicable controls
Risk assessment methodology
Risk assessment report
Statement of applicability
Risk treatment plan
Records

10. Structure of ISO 27001:2013
ISO is the first Standard to adopt the Annex SL structure. The 2013 Standard looks very different to the 2005 version. To help understand the differences, a cross reference table from between the two versions has been included below.
The structure of the ISO 27001:2013 is as follows:
Planning
Support
Operation
Performance evaluation
Improvement
Introduction
Scope
Normative references
Terms and definitions
Context of the organisation
Leadership

11. Process of ISO 27001:2013 Certification
ISO 27001:2013 Certification for Information security management system processes can be established. The company can select the number of controls as per BS:7799 and such controls may be implemented partially or fully and same is written in the certificate after assessing the system by certifying body.
Decision
ISO Management Representative
Gap Analysis and Risk Assessment
Scope & Implementation Plan
Employee Introduction
ISO Documentation Documentation
Realisation
Internal ISO Audits
ISO Certification
Maintaining the ISO Certification

12. Key Benefits of ISO 27001:2013 Keeps confidential information secure
Provides customers and stakeholders with confidence in how you manage risk
Allows for secure exchange of information
Allows you to ensure you are meeting your legal obligations
Helps you to comply with other regulations
Provide you with a competitive advantage
Enhanced customer satisfaction that improves client retention
Consistency in the delivery of your service or product
Manages and minimizes risk exposure
Builds a culture of security
Protects the company, assets, shareholders and directors

13. Thank You.. Contact : iso27001consultants@gmail.com
For more information about ISO 27001:2013 Certification, Auditor Training, Documents and Implementation of IT Security Management System
Contact :