1. ISO 27001
The CEO Guide
to implement ISO 27001

3. ISO 27001
ISO 27002 ISO 27001
ISO 27001
ISO 9001

5. Information can be
Stolen
Entered
Created
Lost
Stored
Processed Destroyed Corrupted

6. Information
Assets

7. Information
•
•
•
•
•

8. What is Information?
“Information is an asset which, like other important
business assets, has value to an organization and
consequently needs to be suitably protected.”
Ref: ISO/IEC 17799:2005

9. Criteria of Information Security.
Confidentiality
Information
Security
Availability Integrity

10. People Processes
Technology

11. Processes
Technology
People

12. Information Security Management system
Tangible assets Confidentiality People, Processes , Technology
Intangible assets Integrity Plan | Do | Check | Act
Availability
ISO 27002, Code of Practice For ISO 27001, Information
Information Security Management Security Management
Systems – Requirement
These standards are accepted as industry best practices

13. ISO 27001

14. ISO 27001

15. ISO 27001
Statement of
applicability

17. ISO 27001
Statement of
applicability

19. Military Commercial
Top Secret. Confidential.
Secret. Private.
Confidential. Sensitive.
Sensitive. Public.
Unclassified.

20. ISO 27001
Statement of
applicability

21. ISO 27001

22. ISO 27002 ISO 27001
ISO 27002 ISO 27001
Control
ISO 27001

23. Technical Proposal
Implementation Methodology
Training Process
Project Documents

25. ISO 27001

26. ISO 27001

27. ISO 27001

28. ISO 9001
ISO 27001

29. Conclusion
ISO 27001

30. Questions & Answers

31. • IT GOVERNANCE, A Manager's Guide to
Data Security and ISO 27001/ISO 27002, 4th
edition, Alan Calder & Steve Watkins.
• Effectively Managing Information Security
Risk, A guide for executives, Citadel
Information Group, Inc. , January, 2007
• http://iso27001standard.com.