This document outlines the various departments, policies, procedures, and controls related to an information security management system (ISMS). It includes sections on management responsibilities, risk management, internal audits, monitoring and compliance, human resources, information technology, operations, development, administration, physical security, business continuity, legal, and privacy controls. The overall purpose is to define and implement an ISMS to securely manage information assets and ensure compliance.

1. Departments
Management
Management Review
Meeting
Management
Responsibility
Management Interest
Fund Allocation for
Security Program
Management Approval
for Residual Risk
ISMS Authorization
Information Security
GAP Analysis
Risk Management
Internal Audit’s
Third Party Audit
Independent Reviews
Monitor and Measure
Corrective and
Preventive Measures
Policies and Procedures
Prepare SOA
Human Resource
Employee Verification
Employee NDA
Contract with HR
Vendors
Employee ISMS
Awareness Training
Document Classification
Roles and
Responsibilities
Competency
DisciplinaryProcess
Information Technology
Assets
Asset Management
Mobile Device and
Teleworker
Asset Classification
Media Handling and
Disposal
User Management
User Acceptance Policy
User Access
Management
Application Access
Management
Password Policy
Clean Desk Policy
Email Management
Cryptographic
Secure Area
Datacenter
Working Area
Securing Data on Public
Network
Operational Procedure
– I
Information Transfer
Procedure
Third Party Data
Transfer
Disclosure Agreement
Internal and External
SLA and OLA’s
Operational Procedures
- II
Incident Management
Change Management
Capacity Management
Business Continuity
Backup Strategy
Documented Operating
Procedures
Software Compliance
Vulnerability
Management
(VAPT/Firewall,
Network Security,
Record Management
Event Logging
Protecting Logs
Clock Sync
Dev Environment
Change Management
Technical Review
Restrict Modificationto
Packages Software's
Secure Engineering
Principles
Secure Development
Environment
Source Code Protection
Monitor and Review
Outsourced
Development
Testing Environment
Protecting Test Cases
Administration
Physical Perimeter
Gate Pass (entry/exit)
Loading and Unloading
Fire Safety
Bio Metrix Access
Control
CCTV
BCP and DR
Implementation
Insurance
Legal
Protecting IP’s
Legislative Statutory
Requirements
Privacy and Protection
Personal Information
Regulation of Crypto
Controls