Assessing the infosec requirements for new ict systems

The meaning of assessing information security requirements for new ICT systems is to cover at least these points:

• to identify what the new systems have to provide in terms of information security, so you can make a clear evaluation of the possible solutions
• to ensure the new systems are compatible with the current systems they have to connect to, so security levels are maintained
• to plan for potential compensation controls in case the new systems do not fulfill all requirements

This article will provide you a further explanation about requirements definition:

• How to set security requirements and test systems according to ISO 27001 https://advisera.com/27001academy/blog/2016/01/11/how-to-set-security-requirements-and-test-systems-according-to-iso-27001/

These materials can also help you:

• ISO 27001 Annex A Controls in Plain English https://advisera.com/books/iso-27001-annex-controls-plain-english/
• ISO 27001 Foundations Course https://advisera.com/training/iso-27001-foundations-course/