Chirag
asked over 2 years ago
Pankaj
answered over 2 years ago
•The Plan Phase– This phase serves to plan the basic organization of information security, set objectives for information security and choose the appropriate security controls (the standard contains a catalogue of 133 possible controls). •The Do Phase– This phase includes carrying out everything that was planned during the previous phase. •The Check Phase – The purpose of this phase is to monitor the functioning of the ISMS through various “channels”, and check whether the results meet the set objectives. •The Act Phase – The purpose of this phase is to improve everything that was identified as non-compliant in the previous phase.
Ashika
answered over 2 years ago
These phases are given as follows: •The Plan Phase– This phase serves to plan the basic organization of information security, set objectives for information security and choose the appropriate security controls (the standard contains a catalogue of 133 possible controls). •The Do Phase– This phase includes carrying out everything that was planned during the previous phase. •The Check Phase – The purpose of this phase is to monitor the functioning of the ISMS through various “channels”, and check whether the results meet the set objectives. •The Act Phase – The purpose of this phase is to improve everything that was identified as non-compliant in the previous phase.
Anil
answered over 2 years ago
**Four phases of ISMS:** ISO 27001: 2005 prescribes ‘how to manage information security through a system of information security management’. Such a management system, just like ISO 9001 or ISO 14001, consists of four phases that should be continuously implemented in order to minimize risks to the CIA of information. These phases are given as follows: ---------------------------------- •The Plan Phase– This phase serves to plan the basic organization of information security, set objectives for information security and choose the appropriate security controls (the standard contains a catalogue of 133 possible controls). •The Do Phase– This phase includes carrying out everything that was planned during the previous phase. •The Check Phase – The purpose of this phase is to monitor the functioning of the ISMS through various “channels”, and check whether the results meet the set objectives. •The Act Phase – The purpose of this phase is to improve everything that was identified as non-compliant in the previous phase.
