{"id":16003,"date":"2020-08-18T13:00:10","date_gmt":"2020-08-18T13:00:10","guid":{"rendered":"https:\/\/www.osscertification.comblog\/?p=16003"},"modified":"2023-03-12T16:29:57","modified_gmt":"2023-03-12T10:59:57","slug":"information-security-controls","status":"publish","type":"post","link":"https:\/\/www.osscertification.com\/blog\/information-security-controls\/","title":{"rendered":"Information Security Controls"},"content":{"rendered":"\r\n

The organization preparing for Information Security Management System \u2013 ISO 27001 Certification.<\/p>\r\n\r\n\r\n\r\n

Information security compliance \u2013 it depends on how effectively Information Security Controls are implemented in the organization by proper Information Security Risk Assessment. \u00a0\u00a0\u00a0The whole intention behind ISO 27001 Certification<\/a> is to ensure that the information security Management System has been implemented effectively in the organization, which provides confidence to their clients and the interested party that information shared with the organization by the clients is secured and kept confidential. Which builds the long-run trust in the organization.<\/p>\r\n\r\n\r\n\r\n

Information security controls play a very important role to ensure that information shared with the organization is secured.<\/p>\r\n\r\n\r\n\r\n

As per ISO 27001 Standard \u2013 there are 114 nos of controls \u2013 But all the Controls may not be applicable to the organization considering the nature of business activities.<\/p>\r\n\r\n\r\n\r\n

So in view to user understating some of the Information Security Controls are explained below \u2013 which could help the user to have a better understanding of information security controls implemented in the organization<\/p>\r\n\r\n\r\n\r\n

Information Security Control Explained<\/u><\/strong><\/p>\r\n\r\n\r\n\r\n

    \r\n
  1. Information security policy \u2013<\/strong> It is a set of security policies that need to be developed to protect information security.<\/li>\r\n<\/ol>\r\n\r\n\r\n\r\n