ISO/IEC 27001: Information Security Management

Update regarding ISO 27001:2022 Upgrade:

In October 2022, a version update was released for the first part of the management system of the ISMS 27001 standard.

This step, added to the process of upgrading the second part - the control manual (ISO 27002), which was conducted before it, completes the process of updating the standard from the 2013 version.

 Relevant information regarding transition to ISO 27001:2022

Establishing an information security management system enables

The Standards Institution of Israel certification of an information security management system pursuant to the specifications of SI ISO 27001 demonstrates that the organization has taken the compliance measures to realize its commitment for effective management and protection of information. The certification is customized for each organization.

• Information and identification and risk management
• Setting consistent and systematic handing and preventative processes
• Selection of the critical controls for the organization, thereby reduces needless costs
• Setting targets for the information security management and proactive planning to achieve them
• Compliance with the law and relevant standards
• Reducing costs from damaged caused by the loss, unavailability of, and inability to retrieve information
• Develop disaster recovery and business continuity capabilities
• Switch to effective and efficient anti-fraud work processes
• Ensuring customers and stakeholders that the organization is prioritizing information security

Standards Institution of Israel auditors will help identify whether the organization's information security management system is compliant to the specifications and what are the points for improvement at different levels.

We recommend integrating the certification process with the organization's quality management system, pursuant to the specifications of SI ISO 9001: Quality management systems in order to create holistic and effective management for the organization.

Road to certification

Certification follows the successful implementation an organization's in-house quality management system pursuant to the requirements of the standard. To start this process, it is recommended to purchase the standard at the Standards Institution of Israel Information Center, study the requirements, and participate in appropriate training. It is also possible to consult with the quality management experts and undergo an audit by Standards Institution of Israel to check for shortcomings.

The process ought to be seen as an opportunity for improvement via the organization team which will receive management commitment and involvement. At the end of the process, independent Standards Institution of Israel auditors will perform an audit that confirms that the organization's management system is compatible to the specifications of the standard.