As somebody in charge of information security for your business or organisation, the first rule of ISO/IEC 27001 compliance is simply to get familiar with what it’s all about.
It doesn’t matter if you’re the CEO, the owner, CTO or Information Security Officer, you should start by obtaining a copy of the standard ISO/IEC 27002 code of practice and reading it over. When reading, you will realise it is a risk management standard: it is essentially an overview of best practice to ensure integrity, confidentiality and availability of your business data. Read more
Risk Management Studio is software from Stiki designed for companies, institutions and local government bodies wanting to guarantee security in the processing of information. The program is based on the methodology of the ISO/IEC 27001 and ISO/IEC 27002 security standards, implemented in October 2005 and July 2007.
