What is ISO27001 certification?
The predecessor of the information security management requirement ISO/IEC27001 is the British BS7799 standard, which was proposed by the British Standards Institute (BSI) in February 1995 and revised in May 1995. In 1999, BSI revised the standard again. BS7799 is divided into two parts: BS7799-1, information security management implementation rules BS7799-2, information security management system specifications. The first part gives advice on information security management for the personnel responsible for initiating, implementing or maintaining security in their organization; the second part explains the requirements for establishing, implementing and documenting an information security management system (ISMS), and stipulates that The needs of the organization shall implement the requirements of security controls.
It is universal, especially suitable for industries involving telecommunications, banking, data processing centers, IC manufacturing and software outsourcing.