Posts

How to implement information security in your organisation

Hello Everyone, If you are implementing or planning to implement information security ISO 27001:2013 then this post is for you.  Here are the steps to implement Information security in your Organisation - 1) Find a right ISO implementation partner- It is important to find implementation partner who has completed multiple information security implementations at various organisations. You can also check if your partner has implemented information security in your domain, getting a partner who has already implemented in same domain boosts confidence and provides clarity. 2) Recruit internal employees for Implementation and Audit- Getting in house experienced Iso certified candidates also helps organisations as checker on implementation projects. 3) Train your existing employees- Even though you have right implementation partner and Internal certified Employee to take care of whole process, it is actually employees who are going to follow the policies and i

Information labelling and Handling ISO 27001:2013

        Information Labelling and handling policy  1) Scope :- This document lists out the policy for proper Information labelling and handling rules to be followed at “COMPANY NAME”. This policy applies to employees, contractors, consultants, temporary staff and other workers at “COMPANY NAME”, including all personnel affiliated with third parties. This policy applies to all equipment that is owned or leased by “COMPANY NAME”. 2) Purpose :- The purpose of this information labelling and handling policy is to ensure Data protection, so that important and “COMPANY NAME” business critical records are protected from loss, destruction and falsification, in accordance with statutory, regulatory, contractual, and business requirements. This policy states that all information must be properly classified, as per the classification specified in this document, and adequate procedures, as specified here must be followed to ensure that the proper level of protection is used for various criticality