Expert Advice Community

Guest

iso27001 and iso20000

  Quote
Guest
Guest user Created:   Oct 11, 2017 Last commented:   Oct 11, 2017

iso27001 and iso20000

One of the topic I have seen in your website, the one related to integrated management system iso27001 and iso2000. I am wondering if this would work in reality, since IT and info sec would fall in different organization unit?
0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Oct 11, 2017

Answer: Although Information Technology and Information Security belong to different domains, they have a considerable overlap that requires that any organizational unit responsible for them to work together. For example, both IT and IS require procedure for incident handling, and to fulfill its mission. Information Technology must integrate information security requirements in its implementation. Regarding information security, when defining which and how to protect information the characteristics of the IT environment should be considered to define the best approach.

These articles will provide you further explanation about integration between information technology and information security:
- Incidents in ISO 22301 vs. ISO 27001 vs. ISO 20000 vs. ISO 28003 https://advisera.com/27001academy/blog/2016/09/05/incidents -in-iso22301-vs-iso27001-vs-iso-20000-vs-iso28003/
- ISO 27001 vs. ITIL: Similarities and differences https://advisera.com/27001academy/blog/2016/03/07/iso-27001-vs-itil-similarities-and-differences/

These materials will also help you regarding integration between information technology and information security:
- How to integrate ISO 27001 and ISO 20000 [free webinar on demand] https://advisera.com/27001academy/webinar/how-to-integrate-iso-27001-and-iso-20000-free-webinar-on-demand/

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Oct 11, 2017

Oct 11, 2017