ISO 27001 Information Security CertificateSystem Certification
Information is one of the most important values of an institution in ensuring business continuity. While many assets are lost, there is no monetary equivalent of the lost information, while it is possible to recover. For this reason, the importance of information and the need to be protected are increasing day by day in changing and developing conditions. Information; It can be used and stored in electronic media, verbally, in the memories of the employees and in many other forms. Due to technological developments, many of these usage patterns may not be used or change over time. Due to this change and development, the security of information must be constantly questioned and controlled. Information security is the protection of the confidentiality, integrity and availability of information.
ISO 27001 Information Security Management System is a management system that includes people, processes and information systems and is supported by top management in ensuring corporate information security. It is designed to protect information assets and provide adequate and proportionate security controls that reassure interested parties. ISO 27001 Information Security Management System includes corporate structure, policies, planning activities, responsibilities, practices, procedures, processes and resources.
What is Information Security?
Information Security integrity and Accessibility are all called Information Security.
Establishing and certifying ISO 27001 Information Security Management System provides the basic principles of the Information Security concept to a company or organization.
We can briefly show the basic principles of the concept of Information Security with the abbreviation G-B-U (C-I-A):
Protection of confidentiality (ensuring that access to information is possible only by authorized persons),
Integrity (Protection of information and information processing methods, accuracy and completeness)
Accessibility (Guaranteeing access of authorized personnel to information and related assets where necessary)