+Information Security Management System (ISMS)

Information Security Management System (ISMS)

The Cloud Service Provider operates an information security management system (ISMS) in accordance with ISO/IEC 27001. The scope of the ISMS covers the Cloud Service Provider's organisational units, locations and procedures for providing the cloud service.The measures for setting up, implementing, maintaining and continuously improving the ISMS are documented.The documentation includes:
• Scope of the ISMS (Section 4.3 of ISO/IEC 27001);
• Declaration of applicability (Section 6.1.3), and
• Results of the last management review (Section 9.3).
Additonal CriteriaThe Information Security Management System (ISMS) has a valid certification according to ISO/IEC 27001 or ISO 27001 based on IT-Grundschutz.
Supplementary Information - About the CriteriaThe basic criterion can also be fulfilled without valid certification of the ISMS according to ISO/IEC 27001 or ISO 27001 based on IT-Grundschutz, if the submitted documentation meets the requirements of ISO/IEC 27001.

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

Изисквания

3. Свързани регулации

Регулации