Introduction

The third subunit will focus on a deeper understanding of the ISO27001 rule. ISO 27001 is built upon the foundation of an ISMS, sharing the same basic principles:

• Risk management,
• Continuous improvement
• Management commitment

The learner will acquire a deeper understanding of what is intended in Annex A of the rule, specifying the categories of controls to be checked. In the end, the areas where the adoption of ISO27001 constitutes a competitive advantage for each organization are given.

The materials needed are:

• Articles introducing ISO27001,
• Articles describing the adoption process of ISO27001,
• Reports of organizations applying ISO 27001.