Current Proceedings on Technology

Yazarlar: Martin Drastich

Konular:-

Anahtar Kelimeler:Information security management system,Standard,Information security,Security management

Özet: For a more efficient way of management and for the need to prove itself in the more and more demanding market environment, every organization, enterprise or company has to achieve higher competitiveness. This can be achieved by the implementation of modern systems of management. One of those new systems is the Information Security Management System. Then, it is necessary to have trained auditors to perform audits. There are various types of audits such as the audit by the first party (the internal audit), the audit by the second party (the audit of supplier) or the audit by the third part (certification body). Audits are performed in order to assess how well the Information Security Management System will correspond with the standard according to which it is implemented and certificated as a result. Problems of information security management system require comprehensive knowledge. We can see a list of standards, which auditor has to know.

---