In 2005, the International Organization for Standardization (ISO) together with the International Electrotechnical Commission developed and adopted the ISO 27001-2005 standard
The ISO 27001 standard contains requirements in the field of information security for creating, implementing, and developing an enterprise's information security management system (ISMS)
The ISO 27001 standard contains all the best global practices in the field of information security management
The enterprise's information security system must demonstrate the organization's ability to protect its information resources
The ISO 27001 standard defines the implementation, operation, monitoring, analysis, maintenance, and improvement of the information security management system
The ISO 27001 standard is harmonized in many aspects and contains similar requirements to ISO 9001. Accordingly, enterprises developing an information security management system can develop and implement an integrated system that meets the requirements of both ISO 27001 and ISO 9001
Today, the latest version of the ISO 27001-2013 standard is in effect, which differs from previous versions in the structure of the standard and requirements
In Ukraine, since 2014, the standard DSTU ISO 27001-2014 "Information Technologies, Security Methods. Information Security Management Systems. Requirements." was adopted, which is essentially a translated copy of the ISO 27001-2013 standard
Certification under the ISO 27001-2013 standard is conducted by Certification Bodies accredited by national accreditation organizations. In Ukraine, this governmental organization is the National Accreditation Agency of Ukraine (NAAU) https://naau.org.ua
ISO 27001 certificate - key provisions
Since 2005, the standard called ISO 27001 certificate has been in effect. It contains requirements related to information security. It helps achieve confidentiality, integrity, and availability of information. Since information is one of the main resources in business relations, it needs protection to prevent the organization from suffering financial losses. Obtaining an ISO 27001 certificate is necessary to prevent harm. This is why the question of developing a system that would manage information security is relevant. ISO 27001 certification in Ukraine can preserve not only the confidentiality of information but also the authenticity of documents.