The essence of the ISMS (ISO-27001) is the protection / security of information. This webinar attempts to show the shift in the focus of the standard between the two editions 2005 & 2013 and how the 2013 edition can be more effective in Information Security, where the management system prescribes a risk based approach. The approach in the risk management process can and would vary from implementer to implementer or organization to organization.
Main points covered:
• The erstwhile focus of the 2005 edition on Vulnerabilities
• The current focus of 2013 edition on risk management
• The significance of the shift for Security implementer's / Risk practitioners
Presenter:
This webinar was presented by Sesha Prakash. Ms. Prakash is Vice President of PromaSecure – consultants for Information Security & Risk management. She has an overall experience of 35 years with the past 8 years devoted to the domains of Information Assurance and Information Security.