Information Security Management in Crisis (ISMC) According to the Standard PN- ISO/IEC 27001: 2017. Introduction to Useful of the System in Small and Medium Enterprises (SME)

• Autorzy: Natalia Jagodzińska
• Języki publikacji: EN

Abstrakty

EN

Purpose: The aim of the article is to indicate the requirements and tools for the implementation of an information security management system according to the PN- ISO/IEC 27001: 2017 standard. Design/methodology/approach: The author presents the requirements of the standard PN- ISO/IEC 27001: 2017 that relate to Information Security Systems (ISS) in terms of their usefulness in small and medium enterprises (SME). Findings: The paper identified requirements of implementation and functioning of an information security management system. Practical implications: The requirements for the information security system indicated in the article are the basis for data security in the organization. Data security is required by potential customers, which is to ensure, m.in, security of contract implementation. Social implications: The information security management system according to the standard PN- ISO/ IEC 27001: 2017 is an extension and support for the requirements of the personal data protection requirements. Originality/value The requirements of the information security management system adapted to the requirements of small and medium sized enterprises are presented.(original abstract)

Słowa kluczowe

EN

Information security; Small business

PL

Bezpieczeństwo informacji; Małe i średnie przedsiębiorstwa

• Czasopismo: Zeszyty Naukowe. Organizacja i Zarządzanie / Politechnika Śląska
• Rocznik: 2022
• Numer: z. 163
• Strony: 123--131

Twórcy

autor

Natalia Jagodzińska

• BTCH - Systemy Zarządzania Gdańsk

Bibliografia

• 1. Journal of Laws of 1997, No. 114, item 740, as amended.
• 2. Journal of Laws of 1999, No. 11, item 95, as amended.
• 3. Journal of Laws of 2000, No. 122, item 1319, as amended.
• 4. Journal of Laws of 2002, No. 101, item 929.
• 5. Journal of Laws of 2002, No. 153 item 1271 as amended.
• 6. Łuczak, M. Tyburski Systemowe zarządzanie bezpieczeństwem informacji ISO/IEC 27001.
• 7. PN-ISO/IEC 27001:2007 standard - Information security management systems - Requirements.
• 8. PN-ISO/IEC 27001:2017 - Information security management systems - Requirements.

Identyfikatory

DOI

10.29119/1641-3466.2022.163.7