Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
An Information Security Management System (ISMS) is a risk-based framework of controls for managing information security, standardized by ISO/IEC 27001.
Information Security Management System (ISMS) Definition: An Information Security Management System (ISMS) is a risk-based framework of controls for managing information security, standardized by ISO/IEC 27001.
An Information Security Management System (ISMS) is a systematic, risk-based framework of policies, processes, and controls for managing an organization's information security. The internationally recognized standard for an ISMS is ISO/IEC 27001, which specifies requirements for establishing, implementing, maintaining, and continually improving the system. An ISMS follows a Plan-Do-Check-Act cycle and supports formal certification to demonstrate security assurance to stakeholders.
Information Security Management System (ISMS) is one of the topics you'll master in the CISSP Boot Camp.
CISSP Boot Camp →