ISO/IEC 27001:2005 is an international standard for information security management. It defines 11 domains and 134 controls for organizations to manage risks to security. The standard covers policies, procedures, and controls for asset management, human resources, physical security, communications, access control, systems development, incident response, business continuity, and compliance. Certification to ISO 27001 helps organizations assure customers and meet legal requirements by implementing an information security management system.

1. ISO/IEC 27001:2005 Information technology Security techniques Information security management systems Requirements Presented By Mr. Fuangwith S. -- Dev-Java

2. Introduction What is ISO/IEC 27001:2005? Why ISO/IEC 27001:2005? Security Standard 11 Domains & 134 Controls e-Transaction Laws Trust Customer Requirements Risk Management

3. 1. Security Policy 1.1 Information Security Policy 1.1.1 Documents 1.1.2 Reviews

4. 2. Organization of information security 2.1 Internal Organization 2.1 External Parties

5. 3. Asset management 3.1 Responsibility for assets 3.2 Information classification

6. 4. Human resources security 4.1 Prior to employment 4.2 During employment 4.3 Termination of change of employment

7. 5. Physical and environmental security 5.1 Secure areas 5.2 Equipment security

8. 6. Communication and operational management 6.1 Operational procedures and responsibilities 6.2 Third party service delivery management 6.3 System planning and acceptance 6.4 Protection against malicious and mobile code 6.5 Back-up 6.6 Network security management 6.7 Media handling 6.8 Exchange of information 6.9 Electronic commerce services 6.10 Monitoring

9. 7. Access control 7.1 Business requirements for access control 7.2 User access management 7.3 User responsibilities 7.4 Network access control 7.5 Operating system access control 7.6 Application and information access control 7.7 Mobile computing and teleworking

10. 8. Systems development and maintenance 8.1 Security requirements of information systems 8.2 Correct processing in applications 8.3 Cryptographic controls 8.4 Security in development and support processes 8.5 Technical Vulnerability Management

11. 9. Information security and incident management 9.1 Reporting information security events and weaknesses 9.2 Management of information security incidents and improvement

12. 10. Business Continuity Plan 10. Information security aspects of business continuity management

13. 11. Compliance 11.1 Compliance with legal requirements 11.2 Compliance with security policies and standard, and technical compliance 11.3 Information systems audit considerations

14. Certified organizations ISO 27001:2005 (iso27001certificates.com) http://www.iso27001certificates.com

15. Other things of interest