Holistic approach
Assign topic to the user
Answer:
The whole set of ISO 27001 mandatory documents ensure that an organization plans (e.g., define information security policy), performs actions (e.g., performing of risk assessment and risk treatment plan, and operation of security controls), controls results (e.g., through performance measurements, internal audits, and management reviews), and improves information security (e..g., by means of treating non conformities and opportunities of improvement).
If you consider only part of the documentation, some steps of the information security management can be forgotten and the security will fail in to achieve the expected results.
These articles will provide you further explanation about ISO 27001 approach:
- What is ISO 27001 https://advisera.com/27001academy/what-is-iso-27001/
- Has the PDCA Cycle been removed f rom the new ISO standards? https://advisera.com/27001academy/blog/2014/04/13/has-the-pdca-cycle-been-removed-from-the-new-iso-standards/
Comment as guest or Sign in
Oct 22, 2018