Zvichienderana nerugwaro rwekureva, ipa rondedzero yematanho matatu e ISO 27001 Certification uye zviitiko zvechikamu chimwe nechimwe.
Context:SO/IEC 27001 inheyo yenyika yose yokutarisira kuchengetedzwa kwemashoko. Chiyero ichi chakatanga kuburitswa pamwe chete neInternational Organisation for Standardization (ISO) neInternational Electrotechnical Commission (IEC) muna 2005, chakagadziridzwa muna 2013, uye zvakare munguva pfupi yapfuura muna 2022. Kunewo misiyano yakawanda yenyika inozivikanwa yemitemo. Rinotsanangura zvinodiwa pakugadzira, kushandisa, kuchengetedza uye kuramba uchivandudza gadziriro yokutarisira kuchengetedzwa kwemashoko (ISMS) <unk> ine chinangwa chokubatsira masangano kuita kuti mashoko avanochengeta ave akachengeteka zvikuru. Masangano anosangana nezvinodiwa nemutemo uyu anogona kusarudza kupiwa chitupa nesangano rakabvumidzwa rokupa zvitupa kana rapedza kubudirira kuongororwa. Kubudirira kweiyo ISO / IEC 27001 maitiro ekuvimbisa uye chiyero chakazara chakagadziriswa muchidzidzo chakakura chakaitwa muna 2020.  Mashandiro anoita mwero wacho Masangano mazhinjisa ane gadziriro dzinoverengeka dzokuchengetedza mashoko. Zvisinei, pasina gadziriro yokutarisira kuchengetedzwa kwemashoko (ISMS), kudzora kunowanzova kusina kurongeka uye kusina kubatana, kwave kuchiitwa kakawanda semhinduro dzenguva dzose kumamiriro ezvinhu chaiwo kana kuti sechinhu chetsika. Kuchengetedzwa kwekuchengetedzwa kwekushanda kunowanzotarisa zvimwe zvikamu zvekuchengetedzwa kwemashoko (IT) kana kuchengetedzwa kwemashoko zvakananga; kusiya zvisiri-IT ruzivo ruzivo (zvakadai semapepa uye ruzivo rwekodzero) zvishoma kudzivirirwa pane zvose. Uyezve, bhizimisi kupfuurira kuronga uye kuchengeteka chaiko inogona kutarisirwa zvachose pasina IT kana mashoko kuchengeteka apo Human Resources miitiro kuti zvishoma panotaurwa kudiwa kutsanangura uye kugovera mashoko kuchengeteka mabasa uye mabasa yose sangano.  ISO/IEC 27001 inoda kuti manejimendi:  kunyatsoongorora njodzi dzekuchengetedzwa kweruzivo rwesangano, uchifunga nezvekutyisidzira, kushomeka, uye kukanganisa; Kugadzira nekushandisa hurongwa hwakabatana uye hwakazara hwekudzora kuchengetedzwa kwemashoko uye/kana mamwe maitiro ekugadzirisa njodzi (senge kudzivirira njodzi kana kuendesa njodzi) kugadzirisa njodzi idzodzo dzinoonekwa sedzisingagamuchirike; uye Kugadzira nzira dzese dzekutarisira kuitira kuti zvirongwa zvekuchengetedza mashoko zvienderere mberi zvichizadzisa zvinodiwa nesangano panyaya dzekuchengetedza mashoko. Ndezvipi zvinodzora zvichaedzwa sechikamu chechivimbiso ku ISO/IEC 27001 zvinoenderana neanoongorora zvitupa. Izvi zvinogona kusanganisira chero zvipi zvinodzora izvo sangano rakaona kuti zviri mukati mekushanda kweISMS uye kuongorora uku kunogona kuva kwakadzama kana kuwanda sezvinotarisirwa nemuongorori sezvinodiwa kuti aongorore kuti kudzora kwaitwa uye kuri kushanda zvinobudirira.  Kutungamira kunogadza nzvimbo yeISMS nokuda kwezvinangwa zvekuvimbiswa uye inogona kuigumira kune, somuenzaniso, imwe yebhizimisi yebhizimisi kana nzvimbo. Chitupa che ISO/IEC 27001 hachirevi kuti sangano rose, kunze kwenzvimbo yakatarwa, rine nzira yakakwana yekugadzirisa kuchengetedzwa kwemashoko.  Mimwe mitemo iri mumhuri yemitemo yeISO/IEC 27000 inopa nhungamiro yekuwedzera pane zvimwe zvinhu zvekugadzira, kuita uye kushanda kweISMS, somuenzaniso pamusoro pekutarisira njodzi yekuchengetedzwa kwemashoko (ISO/IEC 27005).  Nhoroondo ye ISO/IEC 27001 BS 7799 yakanga iri mitemo yakatanga kubudiswa neBSI Group muna 1995. Yakanyorwa neDhipatimendi reHurumende yeUnited Kingdom reZvokutengeserana neZvokugadzira (DTI) uye yaiva nezvikamu zvinoverengeka.  Chikamu chokutanga, chine miitiro yakanakisisa yokutarisira kuchengetedzwa kwemashoko, chakagadziridzwa muna 1998; pashure pokukurukurirana kwenguva refu mumasangano epasi rose, pakupedzisira yakagamuchirwa ne ISO se ISO/IEC 17799, "Information Technology - Code of practice for information security management". muna 2000. ISO/IEC 17799 yakazogadziridzwa muna June 2005 uye pakupedzisira yakabatanidzwa mu ISO 27000 mutsara wemitemo se ISO/IEC 27002 muna July 2007.  Chikamu chechipiri cheBS7799 chakatanga kubudiswa neBSI muna 1999, chinozivikanwa seBS 7799 Chikamu 2, chine musoro unoti "Information Security Management Systems - Specification with guidance for use". BS 7799-2 yakatarisana nemashandisirwo eInformation Security Management System (ISMS), ichitaura nezvekugadziriswa kwekuchengetedzwa kwekuchengetedzwa kwemashoko uye kudzora kunoratidzwa muBS 7799-2. Ikoku gare gare kwakava ISO/IEC 27001:2005. BS 7799 Chikamu 2 chakagamuchirwa ne ISO se ISO/IEC 27001 munaNovember 2005.  BS 7799 Chikamu 3 yakabudiswa muna 2005, ichifukidza kuongorora uye kutarisira njodzi. Inowirirana ne ISO/IEC 27001:2005.  Kunongedzera kushoma kwazvo kana kushandiswa kunoitwa kune ipi neipi yemitemo yeBS maererano neISO/IEC 27001.  Kubvumidzwa ISMS inogona kupiwa chitupa chinoenderana ne ISO/IEC 27001 nevanoverengeka veVanyoresa Vakagamuchirwa pasi rose. Kubvumidzwa maererano nechero ipi yezvakagamuchirwa nyika dzakasiyana dze ISO/IEC 27001 (semuenzaniso JIS Q 27001, shanduro yechiJapanese) nesangano rakagamuchirwa rekupa zvitupa rakaenzana nekushanda maererano ne ISO/IEC 27001 pachayo.  Mune dzimwe nyika, masangano anoongorora kuwirirana kwezvirongwa zvokutarisira nemitemo yakatarwa anonzi "masangano anopa zvitupa", nepo mune dzimwe anowanzonzi "masangano anonyoresa", "masangano anoongorora uye anonyoresa", "masangano anopa zvitupa/anonyoresa", uye dzimwe nguva "vanonyoresa".  ISO/IEC 27001 certification, kufanana nedzimwe ISO management system certifications, kazhinji inosanganisira matanho matatu ekuongorora kwekunze kwakatemwa ne ISO/IEC 17021 uye ISO/IEC 27006 zviyero:  Nhanho 1 inodzokorora isiri yepamutemo yeISMS. Somuenzaniso pane macheki kuvapo uye kukwana anokosha mapepa, akadai sangano mashoko kuchengeteka itsika, Statement of Applicability (SoA), uye Risk Treatment Plan (RTP). Danho iri rinoshandira kuti vaongorori vazive sangano uye zvinopesana. Danho 2 nderokuongorora kwakadzama uye kwepamutemo kwekuteerera, kuongorora kwakazvimirira kweISMS maererano nezvinodiwa zvinotaurwa muISO/IEC 27001. Vaongorori vachatsvaka uchapupu hwokuti hurongwa hwokutarisira hwakagadzirirwa uye hwashandiswa zvakanaka, uye kuti huri kushanda (somuenzaniso nokuratidza kuti dare rinoona nezvekuchengetedzwa kwezvinhu kana kuti rimwewo sangano rinotungamirira rinosangana nguva dzose kuti riongorore ISMS). Kuongorora kwechitupa kunowanzoitwa ne ISO/IEC 27001 Lead Auditors. Kupfuura danho iri kunoguma neISMS ichipihwa chitupa chinoenderana neISO/IEC 27001. Kuenderera mberi kunosanganisira kuongororwa kunotevera kana kuongororwa kuti asimbise kuti sangano rinoramba richitevedzera mutemo. Kuchengetedzwa kwechitupa kunoda kuongororwa kwechigarire kwekudzokorora kusimbisa kuti ISMS inoramba ichishanda sezvakatsanangurwa uye zvakagadzirirwa. Izvi zvinofanira kuitika kanenge kamwe pagore asi (pamubvumirano nevakuru vakuru) zvinowanzoitwa kakawanda, kunyanya apo ISMS ichiri kukura.
Izvi zvinotevera zvikamu zvitatu zve ISO 27001 certification: 1. Zvinhu zvose. Danho 1: Ongororo yokutanga, isiri yepamutemo yeInformation Security Management System. Mabasa anosanganisira kuongorora kuvapo uye kukwana kwemagwaro ekutanga. 2. Kuziva Mwari. Nhanho 2: Kuongorora kwakadzama uye kwepamutemo kunoitwa nemunhu wechitatu kuti asimbise kutevedzwa kwakakwana kwezvinodiwa zvinotaurwa mu ISO 27001 3. Kuita zvinhu nenzira yakanaka. Kuenderera mberi: Kuongorora kwekutevera uye kuongorora kuti uone kuenderera mberi kwekuenderana nezvinodiwa zve ISO 27001.