Difference between revisions 603427202 and 605965665 on enwiki

[[File:Risk Management Elements.jpg|thumb|Plan-Do-Check-Act Cycle]]
[[File:Isms framework.jpg|thumb|ENISA: Risk Management and Isms activities]]
An '''information security management system'''<ref>{{cite web|title=Security management system’s usability key to easy adoption|url=http://www.sourcesecurity.com/news/articles/co-4108-ga.8554.html|publisher=sourcesecurity.com|accessdate=22 August 2013}}</ref>  (ISMS) is a set of policies concerned with [[information securi(contracted; show full)
|-
| '''Specification Control Point'''|| Provide best code of practice for information security management || Provide common set of requirements for the security functionality of IT products || Provide common set of requirements for the security functionality of IT products
|-
| '''Evaluation Method'''|| Use the PD
ACA model cycle || Follow each certification evaluation procedure || Follow commission of European communities
|}

There are a number of initiatives focused to the governance and organizational issues of securing information systems having in mind that it is business and organizational problem, not only a technical problem:
(contracted; show full)* [[WARP (information security)]]
* [[TRAC (ISMS)]]

== Notes and references ==
<references/>


[[Category:Data security]]