The Purpose of ISO 27001

The purpose of the ISO27001 Information Security Management System is to help preserve the confidentiality, integrity, and the availability of your critical business information assets.

Confidentiality refers to limiting access and disclosure of information to authorized users, and preventing access by or disclosure to unauthorized users.

We all have a bank account, and the bank has sensitive personal information about us, so we obviously want to know that only authorized people at the bank has access to our banking and personal information.

Integrity refers to upholding and ensuring the accuracy and reliability of data over its entire life-cycle. This is a critical aspect to the design, implementation and usage of any system which stores, processes or retrieves critical data.

If we are sending an online money transfer of $1,000 but the information was tampered with so we actually sent $10,000 it can prove very costly! You want to be confident that the right amount is deducted from your account; that the accuracy of the information remains.  

Availability of information resources is vital for your information system to function. An information system that isn’t available when needed, is almost as bad as none at all. It may even be much worse, depending on how reliant the organisation has become on a functioning computer and communications infrastructure.

When we visit our local bank to withdraw money, we expect there not to be any issues with the ATM or the computer system. We don’t want the bank to tell us their computer system is down and you are unable to withdraw money. We as customers of the bank should always be able to use the banks services during opening hours, and be confident that the online services work at any given time.

Learn more about how to implement ISO 27001 in our FREE Webinar. This LIVE event kicks off Wednesday, October 18th at 2:30 PM, with our CEO Kobi Simmat and guest expert Mani from Content Security. Register for it here, to save your seat!