Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
An Information Security Management System (ISMS) is a risk-based framework of controls for managing information security, standardized by ISO/IEC 27001.
Information Security Management System (ISMS) Definition: An Information Security Management System (ISMS) is a risk-based framework of controls for managing information security, standardized by ISO/IEC 27001.
An Information Security Management System (ISMS) is a systematic, risk-based framework of policies, processes, and controls for managing an organization's information security. The internationally recognized standard for an ISMS is ISO/IEC 27001, which specifies requirements for establishing, implementing, maintaining, and continually improving the system. An ISMS follows a Plan-Do-Check-Act cycle and supports formal certification to demonstrate security assurance to stakeholders.
Turn knowledge into credentials with our instructor-led cybersecurity boot camps.
View All Courses →