Getting started with ISO 27001

By Sandra Henry-Stocker

After you make a change, you make sure the improvement works its way back into the overall process. So, you create your ISMS (plan), operate under the new rules (do), review the process to ensure it’s working (check) and then use what you’ve learned to improve the process (act).

The next stage -- performing a risk assessment for all identified assets within the scope of your ISO 27001 efforts -- will be covered next week.

Photo Credit:

Follow Sandra on Google+

Sandra Henry-Stocker has been administering Unix systems for more than 25 years. She describes herself as "USL" (Unix as a second language) but remembers enough English to write books and buy groceries. She currently works for TeleCommunication Systems -- a company that builds innovative technologies to make critical connections happen -- where no one else necessarily shares any of her opinions. Send comments and suggestions to bugfarm@gmail.com.