Nikeza isifinyezo esifushane sokuthi i-ISO 27001 isebenza kanjani
Context:Izinhlangano eziningi zinezinqubo zokulawula eziningana zokuphepha kolwazi. Kodwa-ke, ngaphandle kohlelo lokuphathwa kokuphepha kolwazi (ISMS), ukulawula kuvame ukungahleleki futhi kungahlangani, kusetshenziswe kaningi njengezixazululo zamaphuzu ezimweni ezithile noma nje njengendaba yesivumelwano. Ukulawulwa kokuphepha okusebenzayo kuvame ukubhekana nezici ezithile zobuchwepheshe bolwazi (i-IT) noma ukuphepha kwedatha ngokuqondile; kushiya izimpahla zolwazi ezingezona ze-IT (njengamaphepha nolwazi lobunikazi) zivikelekile kancane. Ngaphezu kwalokho, ukuhlelwa kokuqhubeka kwebhizinisi nokuvikeleka ngokomzimba kungalawulwa ngokuzimela kwe-IT noma ukuphepha kolwazi ngenkathi imikhuba ye-Human Resources ingenza ukubhekiswa okuncane kwesidingo sokuchaza nokunikeza izindima nemithwalo yemfanelo yokuphepha kolwazi kuyo yonke inhlangano.  I-ISO/IEC 27001 idinga ukuthi ukuphathwa:  Ukuhlola ngokuhlelekile ubungozi bokuphepha kolwazi lwenhlangano, kucatshangelwa izinsongo, ubuthakathaka, kanye nemithelela; Ukwakha nokusebenzisa uhlelo oluhambisanayo noluphelele lokulawula ukuphepha kolwazi kanye/noma ezinye izindlela zokwelashwa kwengozi (njengokugwema ubungozi noma ukudlulisa ubungozi) ukuze kubhekwane nalezo zingcuphe ezibhekwa njengezingamukeleki; futhi Ukwamukela inqubo ebanzi yokuphatha ukuze kuqinisekiswe ukuthi izilawuli zokuphepha kolwazi ziyaqhubeka nokuhlangabezana nezidingo zokuphepha kolwazi zenhlangano ngokuqhubekayo. Yiziphi izilawuli ezizohlolwa njengengxenye yokuqinisekiswa kwe-ISO/IEC 27001 kuncike kumcwaningi mabhuku wokuqinisekisa. Lokhu kungahlanganisa noma yiziphi izilawuli inhlangano eye yazibheka njengokungena emkhakheni we-ISMS futhi lokhu kuhlolwa kungaba kunoma yikuphi ukujula noma ubukhulu njengoba kuhlolwe ngumcwaningi mabhuku njengoba kudingekile ukuze kuhlolwe ukuthi izilawuli zisetshenzisiwe futhi zisebenza ngempumelelo.  Ukuphathwa kunquma ububanzi be-ISMS ngezinhloso zokuqinisekisa futhi kungakhawulela, ngokwesibonelo, kuyunithi yebhizinisi elilodwa noma indawo. Isitifiketi se-ISO/IEC 27001 asisho ukuthi yonke inhlangano, ngaphandle kwendawo ehlanganisiwe, inendlela efanele yokuphatha ukuphepha kolwazi.  Amanye amazinga emkhayeni wamazinga we-ISO/IEC 27000 anikeza isiqondiso esengeziwe ngezici ezithile zokwakhiwa, ukuqaliswa nokusebenza kwe-ISMS, isibonelo ekuphatheni ubungozi bokuphepha kolwazi (i-ISO/IEC 27005).
Izinga le-ISO 27001 lisebenza ngokudinga ukuphathwa kohlelo lokuphathwa kokuphepha kolwazi ukuhlola izingozi zokuphepha, ukusebenzisa isethi ephelele yezilawuli zokuphepha ukuphatha izingozi ezikhonjisiwe, nokusebenzisa izinqubo eziqhubekayo ukukala ukusebenza kokulawula namazinga ezingozi.