Maintaining an Information Security Management System ISMS  ISO 27001 standard
                     Maintaining an Information 
Security Management System 
(ISMS): ISO 27001 standard
www.infosectrain.com | [email protected]
ISO stands for International Organisation for Standardisation, 
founded in 1947, that builds standards for businesses and 
organizations in 163 countries worldwide. On an international 
level, ISO frequently collaborates with IEC (International 
Electrotechnical Commission). ISO makes documents with 
needed standards, specifications, and guidelines. These can 
consistently be used by companies and assures that 
materials, products, processes, and services are suitable for 
their target. Additionally, ISO ensures that these provisions 
are accepted in all connected countries to ensure 
standardization. With an ISO certification, companies prove 
that their products, services, or systems meet the recognized 
specifications. The ISO standards support innovation and 
improve worldwide quality, safety, and reliability.
www.infosectrain.com | [email protected]
www.infosectrain.com | [email protected]
What is the ISO 27001 standard?
ISO 27001 describes the requirements that an organization must 
apply to produce a model for establishing, executing, operating, 
monitoring, evaluating, and maintaining an Information Security 
Management System (ISMS). An ISMS is a framework of strategies 
and procedures that includes all legal, physical, and technical 
controls included in an organization’s information risk management 
processes. The ISO 27001 gives a checklist of controls that should 
be considered in the accompanying code of practice. This standard 
represents a comprehensive set of information security control 
objectives and a set of generally accepted good practice security 
controls. ISO 27001 is categorized into 12 separate sections:
www.infosectrain.com | [email protected]
1.Introduction: It describes what information security is and why an association 
should manage risks.
2.Scope: It covers high-level conditions for an ISMS to apply for all types of 
organizations.
3.Normative References: This explains the correlation between ISO 27000 and 
27001 standards.
4.Terms and Definitions: It covers the complex technology that is used within 
the standard.
5.Context of the Organization: It explains what stakeholders should be included 
in creating and maintaining the ISMS.
6.Leadership: It defines how leaders within the organization should perform to 
ISMS policies and procedures.
7.Planning: It covers how risk management should be planned crossed the 
organization.
8.Support: It describes how to establish awareness about information security 
responsibilities.
9.Operation: It includes how risks should be managed and how documentation 
should be implemented to meet audit standards.
10.Performance Evaluation: It gives guidelines on how to control and 
measure the performance of the ISMS.
11.Improvement: It explains how the ISMS should be continually updated and 
improved.
12.Reference Control Objectives and Controls It provides an annex 
analyzing the individual elements of an audit.
www.infosectrain.com | [email protected]
ISO 27000 family
The ISO 27000 family has been progressively published since 2005. ISO 
27001:2013 is the only certifiable standard of the ISO 27000 family. The other 
standards are guidelines.
ISO 27000: This information security standard develops the basic concepts and 
the vocabulary that applies when analyzing Information Security Management 
Systems.
ISO 27001: This information security standard defines the requirements of the 
Information Security Management Systems (ISMS).
ISO 27002 (previously ISO 17799): Guide of best practices for 
information security management. This standard defines objectives and 
recommendations in terms of information security and anticipates meeting global 
concerns of organizations relating to information security for their overall 
activities.
ISO 27003: Guide for implementing or setting up an ISMS.
ISO 27004: Guide of metrics to facilitate ISMS management. It provides a 
method to define the objectives for implementation and effectiveness criteria of 
follow-up and evolution measurements all through the process.
www.infosectrain.com | [email protected]
ISO 27005: Guide for information security risk management which 
complies with the concepts, models, and general processes specified in ISO 
27001.
ISO 27006: Guide for organizations auditing and certifying ISMS.
ISO 27007: Guidelines for information security management systems 
auditing.
ISO 27008: Guidelines for auditors on information security controls.
ISO 27011: Guidelines for the use of ISO 27002 in the 
telecommunication industry.
ISO 27031: Guidelines for information and communication technology 
readiness for business continuity.
ISO 27799: Guidelines for the use of ISO 27002 in health informatics.
www.infosectrain.com | [email protected]
How to Become ISO 27001 Certified?
To become ISO 27001 certified, you must attend a course and 
pass its final exam. The ISO 27001 certification exam covers both 
theoretical and situational questions, where the candidate must 
demonstrate how to apply the concepts learned. InfosecTrain 
provides certification training and necessary preparation 
guidance for ISO 27001 certification exams. It is one of the best 
consulting organizations, focusing on a wide range of IT security 
training. Highly skilled and qualified instructors with years of 
industry experience to deliver interactive training sessions on 
ISO 27001 standard certification exam. You can visit the following 
link to prepare for the certification exam.
ISO Certification Training Courses
www.infosectrain.com | [email protected]
About InfosecTrain
• Established in 2016, we are one of the finest 
Security and Technology Training and 
Consulting company
• Wide range of professional training programs, 
certifications & consulting services in the IT 
and Cyber Security domain
• High-quality technical services, certifications 
or customized training programs curated with 
professionals of over 15 years of combined 
experience in the domain
www.infosectrain.com | [email protected]
Our Endorsements
www.infosectrain.com | [email protected]
Why InfosecTrain Global Learning Partners
Certified and Flexible modes Access to the 
Experienced Instructors of Training recorded 
sessions
Post training Tailor Made 
completion Training
www.infosectrain.com | [email protected]
Our Trusted Clients
www.infosectrain.com | [email protected]

Contact us
Get your workforce reskilled 
by our certified and 
experienced instructors!
IND: 1800-843-7890 (Toll Free) / US: +1 657-221-
1127  / UK : +44 7451 208413
[email protected]
www.infosectrain.com