ISO/IEC 27001 Information Security Management System

We can access all types of information today: it may be written on a paper, stored electronically, transferred through mail or electronic mail, or transferred orally interpersonally. Regardless of the form of information, it should be protected with suitable methods.

The information can be secured only by ensuring the confidentiality, integrity and availability of the information in sufficient levels. The information security aims the following three factors:

Confidentiality

Integrity

Availability

The Information Security Management System, i.e., BGYS, is a systematic approach adopted in order to manage the sensitive information of the relevant institution. Main aim of the BGYS is to protect the sensitive information. The ISO/IEC 27001 Information Security Management Systems – Requirements Standard is applied. It covers the requirements in order to establish, conduct, monitor, revise, maintain and improve the BGYS of the relevant institution within the context of all operational risks.

Who Needs Information Security Management System?

ISO/IEC 27001 is applicable for all large- and small-scaled institutions regardless of their sectors. It is necessary for the fields which protection of information is essential such as finance, health, public, university and software sectors. 

Benefits of Application of the Information Security Management System

Realizing the existence of information: It understands the existence of information and realizes the value of it.

Ability to protect its possessions: It determines the protection methods with the controls it will establish and provide protection by applying them.

Business continuity: It guarantees the operations for long years. Besides, it has the competency to continue the operations in case of a disaster.

Being in reconciliation with the relevant parties: It earns trust of the relevant parties, especially its suppliers since their information will be protected.

It protects an information thanks to a system, not as a result of incidental actions.

It increases the motivations of the employees.

It provides high reputation.