ISO 27001 FAQ
1) When was ISO 27001 standard published?
In October 2005, although a final draft version was published some months prior to this.
2) Is it related to ISO 27002/17799
Yes. It essentially described how to apply the controls defined within ISO 27002, and of course how to build and maintain and ISMS.
3) What is PDCA cycle of ISO 27001?
This standard for PLAN-DO-CHECK-ACT, and is a cycle described by ISO 27001 to enable continual improvement.
4) What documents are normally parts of an ISMS?
Documented statements of the ISMS policy, The scope of the ISMS, Procedures and controls in support of the ISMS, A description of the risk assessment methodology, The risk assessment report, The risk treatment plan, Documented procedures needed by the organization, Records required by this International Standard, The Statement of Applicability.
5) Who originally wrote the security standard?
Originally a BSI/DISC committee, which included representatives from a wide section of industry/commerce. It was reviewed subsequently by an ISO (International Standards Organization)committee and ultimately emerged through the ISO publication process.
6) What is ISO 27001?
BS7799-2, the original specification for an information security management system, was 'fast tracked' by ISO to become ISO 27001 in 2005.