Overview

An Information Security Management System (ISMS) is the framework that helps organizations manage information security risks through threat assessment, monitoring, and continual improvement.

A well-designed system requires identifying potential security breach sources, mitigating them, and providing a solid ongoing defence system. An attack will happen – it’s not a case of ‘if’; it’s a matter of ‘when’.  Predicting and mitigating every risk your information system might be exposed to is virtually impossible. It is possible, however, to create and manage a system that will give you a fighting chance.

The key is to prepare, detect vulnerabilities, and create a resilient management system that supports interactions with many layers of cyber connections. That’s how an information security management system prepares you for the future.

Key takeaways and learning objectives

During this educational webinar, you will learn:

What does an ISMS look like?

• The harmonized structure of ISO 27001 integrates perfectly with other harmonized standards.
• Annex A requirements, if properly implemented, help you keep your assets safe.
• Audits (internal and external) help you find ways to improve the effectiveness of your system and keep information secure.

What are the benefits of an ISMS?

• Security benefits.
• Stakeholder confidence benefits.
• Financial benefits.

What does an effective ‘implementation plan’ look like?

• Who should be on the planning and implementation team?
• What assets are critical?
• What will they do, and how will they report progress?

An ISO/IEC 27001:2022 Information Security Management System will help you continually monitor and manage cyber threats across your organization and constantly improve the security of your information assets.

Presenter information

Host - Caio Cologni, Business Development Manager, BSI Group Canada

Speaker - Jim Moran MA Ed. MSP, Training Instructor, BSI Group Canada