ISIS12
ISIS12 or Information Security Management in 12 Steps is a German program to simplify the establishment of an Information Security Management System (ISMS) according to ISO 27001 in small and medium-sized enterprises. It was developed in Germany by the Network for Information Security in the Small Firm Sector (Netzwerk für Informationssicherheit im Mittelstand) to allow for the lack of ressources and infrastructure in SMEs to fully implement an ISMS. To achieve that particular threat scenarios are left out and clear guidelines are provided. ISIS12 works as an iterative process and comprises 12 steps:
- Define guideline
- Train employees
- Set up information security team
- Define IT documentation structure
- Implement IT service management process
- Identify critical applications
- Analyze IT structure
- Model security measures
- Compare targets and performance
- Plan implementation
- Implement
- Revise ISIS12 can be independently certified.
