![](/assets/images/picto-drapeau-france-3a76576a5d60a512053b4612ab58dae5.png)
2. Establishment and management of the ISMS" phase
2.1 Determining scope and policy
ISMS planning involves defining the scope and limits of the organization's activity (its location, assets, technologies). The scope of the ISMS thus includes :
the general orientation of the WSIS and the principles of action of the information security policy ;
requirements linked to the organization's activity and its legal and regulatory constraints (for example: confidentiality and secrecy of customer information in the banking sector);
the ISMS must be linked to the company's overall risk management logic (strategic and global risk management), operating on the basis of precise risk assessment criteria and having been approved by...
Exclusive to subscribers. 97% yet to be discovered!
You do not have access to this resource.
Click here to request your free trial access!
Already subscribed? Log in!
![](/assets/images/logo-eti-286623ed91fa802ce039246e516e5852.png)
The Ultimate Scientific and Technical Reference
This article is included in
Safety and risk management
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
Establishment and management of the ISMS" phase
Bibliography
Websites
Site dedicated to ISO 27001 :
Website dedicated to IT Governance:
http://www.itgovernance.eu/c-17-iso27001
Site dedicated to ISO 27001 certification (LSTI) :
Standards and norms
- Lignes directrices pour l'audit des systèmes de management de la qualité et/ou de management environnemental. - ISO/IEC 19011 - 2012
- Quality management systems – Requirements - ISO 9001 - 2015
- Environmental management systems – Requirements and guidelines for use. - ISO 14001 - 2015
- Conformity assessment – Requirements for bodies providing audit and certification of management systems – Part 1:...
Directory
Organizations – Federations – Associations (non-exhaustive list)
ISO :
AFNOR :
CLUb de la Sécurité de l'Information Français (CLUSIF) :...
Exclusive to subscribers. 97% yet to be discovered!
You do not have access to this resource.
Click here to request your free trial access!
Already subscribed? Log in!
![](/assets/images/logo-eti-286623ed91fa802ce039246e516e5852.png)
The Ultimate Scientific and Technical Reference