Description
ISO/IEC 27001:2022 international standard specifies the requirements for establishing, implementing, maintaining and continually
improving an information security management system within the context of the organization. It also includes requirements for
the assessment and treatment of information security risks tailored to the needs of the organization.
Information being a valuable asset and a building block is the key to the growth of any organization. Information needs to be
suitably protected like any other important business asset.
In the modern world this asset becomes crucial for success and maintaining credibility of the organization. If this asset is
compromised then the organization may have to face various threats and risks like brand image erosion, business disruption,
financial and productivity loss etc. On the other side, information security also maximize return on investments, minimize
business risks and increase business opportunities.
