{"id":11271,"date":"2026-04-06T09:28:34","date_gmt":"2026-04-06T07:28:34","guid":{"rendered":"https:\/\/www.dicisgroup.com\/what-is-iso-27001-information-security-explained-simply-dicis-ag\/"},"modified":"2026-09-02T14:56:04","modified_gmt":"2026-09-02T12:56:04","slug":"what-is-iso-27001-information-security-explained-simply-dicis-ag","status":"publish","type":"page","link":"https:\/\/www.dicisgroup.com\/en\/what-is-iso-27001-information-security-explained-simply-dicis-ag\/","title":{"rendered":"What is ISO 27001? Information security explained simply | DICIS AG"},"content":{"rendered":"<p><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-1 fusion-flex-container has-pattern-background has-mask-background nonhundred-percent-fullwidth non-hundred-percent-height-scrolling fusion-custom-z-index\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-z-index:1;--awb-padding-top:60px;--awb-padding-bottom:60px;--awb-background-color:rgba(255,255,255,0);--awb-background-image:radial-gradient(circle at center center, var(--awb-color1) 0%,var(--awb-color2) 100%);--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-center fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"max-width:calc( 1280px + 15px );margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-0 fusion_builder_column_3_4 3_4 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:75%;--awb-margin-top-large:0px;--awb-spacing-right-large:calc( 0 * calc( 100% - 15px ) );--awb-margin-bottom-large:0px;--awb-spacing-left-large:7.5px;--awb-width-medium:75%;--awb-order-medium:0;--awb-spacing-right-medium:calc( 0 * calc( 100% - 15px ) );--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-center fusion-content-layout-column\"><nav class=\"fusion-breadcrumbs fusion-breadcrumbs-1\" style=\"--awb-margin-bottom:5px;--awb-alignment:center;--awb-font-size:14px;--awb-text-hover-color:var(--awb-color3);--awb-text-color:var(--awb-custom_color_17);--awb-breadcrumb-sep:&#039;\/&#039;;text-align:center;\" aria-label=\"Breadcrumb\"><ol class=\"awb-breadcrumb-list\"><li class=\"fusion-breadcrumb-item awb-breadcrumb-sep awb-home\" ><a href=\"https:\/\/www.dicisgroup.com\/en\/\" class=\"fusion-breadcrumb-link\"><span >Home<\/span><\/a><\/li><\/ol><\/nav><div class=\"fusion-title title fusion-title-1 fusion-sep-none fusion-title-center fusion-title-text fusion-title-size-one\" style=\"--awb-text-color:var(--awb-custom_color_32);--awb-margin-top-small:10px;--awb-margin-right-small:10px;--awb-margin-bottom-small:10px;--awb-margin-left-small:10px;--awb-font-size:var(--awb-custom_typography_8-font-size);\"><h1 class=\"fusion-title-heading title-heading-center fusion-responsive-typography-calculated\" style=\"font-family:var(--awb-custom_typography_8-font-family);font-weight:var(--awb-custom_typography_8-font-weight);font-style:var(--awb-custom_typography_8-font-style);margin:0;letter-spacing:var(--awb-custom_typography_8-letter-spacing);text-transform:var(--awb-custom_typography_8-text-transform);font-size:1em;--fontSize:52;line-height:1.3;\">What is <span style=\"color: var(--awb-custom_color_38);\">ISO 27001?<\/span> Information security explained simply <span style=\"font-weight: normal;\">|<\/span> DICIS AG<\/h1><\/div><div class=\"fusion-title title fusion-title-2 fusion-sep-none fusion-title-center fusion-title-text fusion-title-size-one\" style=\"--awb-text-color:var(--awb-custom_color_32);--awb-margin-top-small:10px;--awb-margin-right-small:10px;--awb-margin-bottom-small:10px;--awb-margin-left-small:10px;--awb-font-size:var(--awb-custom_typography_9-font-size);\"><h1 class=\"fusion-title-heading title-heading-center fusion-responsive-typography-calculated\" style=\"font-family:var(--awb-custom_typography_9-font-family);font-weight:var(--awb-custom_typography_9-font-weight);font-style:var(--awb-custom_typography_9-font-style);margin:0;letter-spacing:var(--awb-custom_typography_9-letter-spacing);text-transform:var(--awb-custom_typography_9-text-transform);font-size:1em;--fontSize:60;line-height:1.2;\"><\/h1><\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-2 fusion-flex-container has-pattern-background has-mask-background nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-overflow:hidden;--awb-background-color:var(--awb-custom_color_1);--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-center fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"max-width:calc( 1280px + 15px );margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-1 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-text fusion-text-1 fusion-text-no-margin\" style=\"--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-margin-bottom:0px;--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>ISO 27001 is an international standard for <a href=\"https:\/\/www.dicisgroup.com\/en\/what-is-an-information-security-management-system-according-to-iso-27001\/\">information security management systems<\/a>, which organizations (companies, associations, clubs, authorities, etc.) use to reliably implement all data protection and information security requirements. It follows the same principles as <a href=\"https:\/\/www.dicisgroup.com\/en\/what-is-a-quality-management-system-explained-simply-and-clearly\/\">quality management systems<\/a> such as <a href=\"https:\/\/www.dicisgroup.com\/en\/what-is-iso-90012026-an-easy-to-understand-introduction\/\">ISO 9001<\/a>, the so-called &#8220;High Level Structure&#8221; of the ISO family of standards. <a href=\"https:\/\/www.dicisgroup.com\/en\/what-are-the-benefits-of-iso-management-systems\/\">Management systems<\/a> according to ISO 27001 can be certified as part of an <a href=\"https:\/\/www.dicisgroup.com\/en\/what-is-iso-certification-a-simple-explanation-for-companies-dicis-ag\/\">ISO certification<\/a>. In this article, you will learn about the requirements of ISO 27001.  <\/p>\n<\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-3 fusion-flex-container has-pattern-background has-mask-background nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-overflow:visible;--awb-padding-top:40px;--awb-padding-right:0px;--awb-padding-bottom:40px;--awb-padding-left:0px;--awb-padding-top-small:30px;--awb-padding-right-small:20px;--awb-padding-bottom-small:30px;--awb-padding-left-small:20px;--awb-flex-wrap:wrap;--awb-flex-wrap-medium:wrap;--awb-flex-wrap-small:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-center fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"max-width:calc( 1280px + 15px );margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-2 fusion_builder_column_4_5 4_5 fusion-flex-column\" style=\"--awb-padding-right:2px;--awb-padding-right-medium:0px;--awb-padding-left-medium:0px;--awb-padding-right-small:15px;--awb-padding-left-small:15px;--awb-bg-size:cover;--awb-width-large:80%;--awb-margin-top-large:0px;--awb-spacing-right-large:calc( 0 * calc( 100% - 15px ) );--awb-margin-bottom-large:0px;--awb-spacing-left-large:calc( 0 * calc( 100% - 15px ) );--awb-width-medium:66.666666666667%;--awb-order-medium:0;--awb-spacing-right-medium:calc( 0 * calc( 100% - 15px ) );--awb-spacing-left-medium:calc( 0 * calc( 100% - 15px ) );--awb-width-small:100%;--awb-order-small:0;--awb-margin-top-small:25px;--awb-spacing-right-small:calc( 0 * calc( 100% - 15px ) );--awb-spacing-left-small:calc( 0 * calc( 100% - 15px ) );\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-3 fusion-sep-none fusion-title-center fusion-title-text fusion-title-size-two\" style=\"--awb-text-color:var(--awb-custom_color_4);--awb-margin-top:10px;--awb-margin-top-small:5px;--awb-margin-right-small:10px;--awb-margin-bottom-small:10px;--awb-margin-left-small:0px;--awb-font-size:var(--awb-custom_typography_7-font-size);\"><h2 class=\"fusion-title-heading title-heading-center fusion-responsive-typography-calculated\" style=\"font-family:var(--awb-custom_typography_7-font-family);font-weight:var(--awb-custom_typography_7-font-weight);font-style:var(--awb-custom_typography_7-font-style);margin:0;letter-spacing:var(--awb-custom_typography_7-letter-spacing);text-transform:var(--awb-custom_typography_7-text-transform);font-size:1em;--fontSize:44;line-height:1.3;\">Why does I<span style=\"color: var(--awb-custom_color_20);\">SO 27001 exist?<\/span><\/h2><\/div><div class=\"fusion-text fusion-text-2\" style=\"--awb-content-alignment:center;--awb-font-size:var(--awb-typography4-font-size);--awb-line-height:var(--awb-typography4-line-height);--awb-letter-spacing:var(--awb-typography4-letter-spacing);--awb-text-transform:var(--awb-typography4-text-transform);--awb-text-color:var(--awb-custom_color_4);--awb-text-font-family:var(--awb-typography4-font-family);--awb-text-font-weight:var(--awb-typography4-font-weight);--awb-text-font-style:var(--awb-typography4-font-style);\"><p>Information security and data protection are among the most important topics for organizations that want and need to professionalize within the framework of digitalization and digital transformation. ISO 27001 is based on a simple philosophy: information security and data protection must not be a coincidence. There must be fixed rules for,  <\/p>\n<\/div><ul style=\"--awb-size:16px;--awb-iconcolor:var(--awb-custom_color_34);--awb-textcolor:var(--awb-custom_color_5);--awb-line-height:27.2px;--awb-icon-width:27.2px;--awb-icon-height:27.2px;--awb-icon-margin:11.2px;--awb-content-margin:38.4px;\" class=\"fusion-checklist fusion-checklist-1 fusion-checklist-default type-icons\"><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><b>who, for example, is allowed to create new users,<\/b><\/p>\n<\/div><\/li><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><b>who manages their role permissions,<\/b><\/p>\n<\/div><\/li><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><b>which specific behavioral guidelines users of IT systems must follow,<\/b><\/p>\n<\/div><\/li><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><b>at what intervals and with which methods IT security is checked, etc.<\/b><\/p>\n<\/div><\/li><\/ul><div class=\"fusion-text fusion-text-3\" style=\"--awb-margin-top:20px;\"><p style=\"text-align: center;  \">ISO 27001 follows the logic of the PDCA cycle known from quality management: Plan, Do, Check, Act. <\/p>\n<\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-3 fusion_builder_column_1_2 1_2 fusion-flex-column fusion-flex-align-self-flex-start\" style=\"--awb-overflow:hidden;--awb-bg-size:cover;--awb-border-radius:25px 25px 25px 25px;--awb-width-large:50%;--awb-margin-top-large:40px;--awb-spacing-right-large:0px;--awb-margin-bottom-large:0px;--awb-spacing-left-large:0px;--awb-width-medium:66.666666666667%;--awb-order-medium:0;--awb-spacing-right-medium:0px;--awb-spacing-left-medium:0px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:0px;--awb-spacing-left-small:0px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-center fusion-content-layout-column\"><div class=\"fusion-video fusion-youtube\" style=\"--awb-max-width:1920px;--awb-max-height:1080px;\"><div class=\"video-shortcode\"><div class=\"fluid-width-video-wrapper\" style=\"padding-top:56.25%;\" ><iframe title=\"YouTube video player 1\" src=\"https:\/\/www.youtube.com\/embed\/mCWWaDV7Dbo?wmode=transparent&autoplay=0\" width=\"1920\" height=\"1080\" allowfullscreen allow=\"autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture;\"><\/iframe><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-4 fusion-flex-container has-pattern-background has-mask-background nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"max-width:calc( 1280px + 15px );margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-4 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-padding-top:25px;--awb-padding-right:25px;--awb-padding-bottom:25px;--awb-padding-left:25px;--awb-padding-top-small:15px;--awb-padding-right-small:15px;--awb-padding-bottom-small:15px;--awb-padding-left-small:15px;--awb-overflow:hidden;--awb-bg-color:var(--awb-custom_color_18);--awb-bg-color-hover:var(--awb-custom_color_18);--awb-bg-size:cover;--awb-border-color:var(--awb-custom_color_17);--awb-border-top:1px;--awb-border-right:1px;--awb-border-bottom:6px;--awb-border-left:1px;--awb-border-radius:15px 15px 15px 15px;--awb-width-large:83.333333333333%;--awb-margin-top-large:0px;--awb-spacing-right-large:0px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:0px;--awb-width-medium:100%;--awb-spacing-right-medium:20px;--awb-spacing-left-medium:20px;--awb-width-small:100%;--awb-spacing-right-small:20px;--awb-margin-bottom-small:5px;--awb-spacing-left-small:20px;\"><div class=\"fusion-column-wrapper fusion-flex-justify-content-center fusion-content-layout-column\"><div class=\"fusion-builder-row fusion-builder-row-inner fusion-row fusion-flex-align-items-flex-start fusion-flex-align-content-center fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"--awb-min-height:no;--awb-min-height-small:no;--awb-flex-grow:undefined;--awb-flex-grow-medium:undefined;--awb-flex-grow-small:undefined;--awb-flex-shrink:undefined;--awb-flex-shrink-medium:undefined;--awb-flex-shrink-small:undefined;width:calc( 100% + 15px ) !important;max-width:calc( 100% + 15px ) !important;margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column_inner fusion-builder-nested-column-0 fusion-flex-column fusion-flex-align-self-stretch\" style=\"--awb-bg-size:cover;--awb-width-large:150px;--awb-margin-top-large:0px;--awb-spacing-right-large:0px;--awb-margin-bottom-large:0px;--awb-spacing-left-large:7.5px;--awb-width-medium:150px;--awb-order-medium:0;--awb-spacing-right-medium:0px;--awb-spacing-left-medium:7.5px;--awb-width-small:150px;--awb-order-small:0;--awb-spacing-right-small:0px;--awb-spacing-left-small:7.5px;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-image-element \" style=\"--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><span class=\" fusion-imageframe imageframe-none imageframe-1 hover-type-none\" style=\"border-radius:25px;\"><img decoding=\"async\" width=\"200\" height=\"177\" title=\"PDCA-cycle-1-plan\" src=\"https:\/\/www.dicisgroup.com\/wp-content\/uploads\/2026\/04\/PDCA-Zyklus-1-Plan.png\" alt class=\"img-responsive wp-image-1379\"\/><\/span><\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column_inner fusion-builder-nested-column-1 fusion_builder_column_inner_1_2 1_2 fusion-flex-column\" style=\"--awb-padding-left:30px;--awb-bg-size:cover;--awb-width-large:50%;--awb-flex-grow:1;--awb-margin-top-large:0px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:0px;--awb-spacing-left-large:0px;--awb-width-medium:50%;--awb-order-medium:0;--awb-flex-grow-medium:1;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:0px;--awb-width-small:75%;--awb-order-small:0;--awb-flex-grow-small:1;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:0px;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-4 fusion-sep-none fusion-title-text fusion-title-size-four\" style=\"--awb-text-color:var(--awb-custom_color_4);--awb-margin-bottom:6px;--awb-margin-top-small:0px;--awb-margin-right-small:0px;--awb-margin-bottom-small:5px;--awb-margin-left-small:0px;--awb-font-size:22px;\"><h4 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"margin:0;font-size:1em;--fontSize:22;--minFontSize:22;line-height:1.3;\">Plan: Define and establish the information security management system<\/h4><\/div><div class=\"fusion-text fusion-text-4 fusion-text-no-margin\" style=\"--awb-content-alignment:left;--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-color:var(--awb-custom_color_5);--awb-margin-bottom:0px;--awb-margin-top-small:0px;--awb-margin-bottom-small:0px;--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>Roles and authorities, processes and procedure descriptions, the basis for internal audits and controls\u2014all of this is determined during the planning of a management system according to ISO 27001. In other words: the theoretical foundation is created. This makes it clear who has to do what, when, and how in relation to information security.  <\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-5 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-padding-top:25px;--awb-padding-right:25px;--awb-padding-bottom:25px;--awb-padding-left:25px;--awb-padding-top-small:15px;--awb-padding-right-small:15px;--awb-padding-bottom-small:15px;--awb-padding-left-small:15px;--awb-overflow:hidden;--awb-bg-color:var(--awb-custom_color_18);--awb-bg-color-hover:var(--awb-custom_color_18);--awb-bg-size:cover;--awb-border-color:var(--awb-custom_color_17);--awb-border-top:1px;--awb-border-right:1px;--awb-border-bottom:6px;--awb-border-left:1px;--awb-border-radius:15px 15px 15px 15px;--awb-width-large:83.333333333333%;--awb-margin-top-large:0px;--awb-spacing-right-large:0px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:0px;--awb-width-medium:100%;--awb-spacing-right-medium:20px;--awb-spacing-left-medium:20px;--awb-width-small:100%;--awb-spacing-right-small:20px;--awb-margin-bottom-small:5px;--awb-spacing-left-small:20px;\"><div class=\"fusion-column-wrapper fusion-flex-justify-content-center fusion-content-layout-column\"><div class=\"fusion-builder-row fusion-builder-row-inner fusion-row fusion-flex-align-items-flex-start fusion-flex-align-content-center fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"--awb-min-height:no;--awb-min-height-small:no;--awb-flex-grow:undefined;--awb-flex-grow-medium:undefined;--awb-flex-grow-small:undefined;--awb-flex-shrink:undefined;--awb-flex-shrink-medium:undefined;--awb-flex-shrink-small:undefined;width:calc( 100% + 15px ) !important;max-width:calc( 100% + 15px ) !important;margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column_inner fusion-builder-nested-column-2 fusion-flex-column fusion-flex-align-self-stretch\" style=\"--awb-bg-size:cover;--awb-width-large:150px;--awb-margin-top-large:0px;--awb-spacing-right-large:0px;--awb-margin-bottom-large:0px;--awb-spacing-left-large:7.5px;--awb-width-medium:150px;--awb-order-medium:0;--awb-spacing-right-medium:0px;--awb-spacing-left-medium:7.5px;--awb-width-small:150px;--awb-order-small:0;--awb-spacing-right-small:0px;--awb-spacing-left-small:7.5px;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-image-element \" style=\"--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><span class=\" fusion-imageframe imageframe-none imageframe-2 hover-type-none\" style=\"border-radius:25px;\"><img decoding=\"async\" width=\"200\" height=\"177\" title=\"PDCA-cycle-2-do\" src=\"https:\/\/www.dicisgroup.com\/wp-content\/uploads\/2026\/04\/PDCA-Zyklus-2-Do.png\" alt class=\"img-responsive wp-image-1380\"\/><\/span><\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column_inner fusion-builder-nested-column-3 fusion_builder_column_inner_1_2 1_2 fusion-flex-column\" style=\"--awb-padding-left:30px;--awb-bg-size:cover;--awb-width-large:50%;--awb-flex-grow:1;--awb-margin-top-large:0px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:0px;--awb-spacing-left-large:0px;--awb-width-medium:50%;--awb-order-medium:0;--awb-flex-grow-medium:1;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:0px;--awb-width-small:75%;--awb-order-small:0;--awb-flex-grow-small:1;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:0px;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-5 fusion-sep-none fusion-title-text fusion-title-size-four\" style=\"--awb-text-color:var(--awb-custom_color_4);--awb-margin-bottom:6px;--awb-margin-top-small:0px;--awb-margin-right-small:0px;--awb-margin-bottom-small:5px;--awb-margin-left-small:0px;--awb-font-size:22px;\"><h4 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"margin:0;font-size:1em;--fontSize:22;--minFontSize:22;line-height:1.3;\">Do: Put the theoretical plan into practice<\/h4><\/div><div class=\"fusion-text fusion-text-5 fusion-text-no-margin\" style=\"--awb-content-alignment:left;--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-color:var(--awb-custom_color_5);--awb-margin-bottom:0px;--awb-margin-top-small:0px;--awb-margin-bottom-small:0px;--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>Every plan is only as good as its execution. Implementation in practice therefore plays an important role in management systems like ISO 27001. What measures ensure that the information security management system does not remain a theoretical concept? In fact, this is one of the major challenges for organizations. An ISO 27001 manual can be quickly downloaded from the Internet, and templates for process descriptions and work instructions are also easy to find. But now it is a matter of reliably putting this into practice.     <\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-6 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-padding-top:25px;--awb-padding-right:25px;--awb-padding-bottom:25px;--awb-padding-left:25px;--awb-padding-top-small:15px;--awb-padding-right-small:15px;--awb-padding-bottom-small:15px;--awb-padding-left-small:15px;--awb-overflow:hidden;--awb-bg-color:var(--awb-custom_color_18);--awb-bg-color-hover:var(--awb-custom_color_18);--awb-bg-size:cover;--awb-border-color:var(--awb-custom_color_17);--awb-border-top:1px;--awb-border-right:1px;--awb-border-bottom:6px;--awb-border-left:1px;--awb-border-radius:15px 15px 15px 15px;--awb-width-large:83.333333333333%;--awb-margin-top-large:0px;--awb-spacing-right-large:0px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:0px;--awb-width-medium:100%;--awb-spacing-right-medium:20px;--awb-spacing-left-medium:20px;--awb-width-small:100%;--awb-spacing-right-small:20px;--awb-margin-bottom-small:5px;--awb-spacing-left-small:20px;\"><div class=\"fusion-column-wrapper fusion-flex-justify-content-center fusion-content-layout-column\"><div class=\"fusion-builder-row fusion-builder-row-inner fusion-row fusion-flex-align-items-flex-start fusion-flex-align-content-center fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"--awb-min-height:no;--awb-min-height-small:no;--awb-flex-grow:undefined;--awb-flex-grow-medium:undefined;--awb-flex-grow-small:undefined;--awb-flex-shrink:undefined;--awb-flex-shrink-medium:undefined;--awb-flex-shrink-small:undefined;width:calc( 100% + 15px ) !important;max-width:calc( 100% + 15px ) !important;margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column_inner fusion-builder-nested-column-4 fusion-flex-column fusion-flex-align-self-stretch\" style=\"--awb-bg-size:cover;--awb-width-large:150px;--awb-margin-top-large:0px;--awb-spacing-right-large:0px;--awb-margin-bottom-large:0px;--awb-spacing-left-large:7.5px;--awb-width-medium:150px;--awb-order-medium:0;--awb-spacing-right-medium:0px;--awb-spacing-left-medium:7.5px;--awb-width-small:150px;--awb-order-small:0;--awb-spacing-right-small:0px;--awb-spacing-left-small:7.5px;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-image-element \" style=\"--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><span class=\" fusion-imageframe imageframe-none imageframe-3 hover-type-none\" style=\"border-radius:25px;\"><img decoding=\"async\" width=\"200\" height=\"177\" title=\"PDCA-cycle-3-check\" src=\"https:\/\/www.dicisgroup.com\/wp-content\/uploads\/2026\/04\/PDCA-Zyklus-3-Check.png\" alt class=\"img-responsive wp-image-1381\"\/><\/span><\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column_inner fusion-builder-nested-column-5 fusion_builder_column_inner_1_2 1_2 fusion-flex-column\" style=\"--awb-padding-left:30px;--awb-bg-size:cover;--awb-width-large:50%;--awb-flex-grow:1;--awb-margin-top-large:0px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:0px;--awb-spacing-left-large:0px;--awb-width-medium:50%;--awb-order-medium:0;--awb-flex-grow-medium:1;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:0px;--awb-width-small:75%;--awb-order-small:0;--awb-flex-grow-small:1;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:0px;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-6 fusion-sep-none fusion-title-text fusion-title-size-four\" style=\"--awb-text-color:var(--awb-custom_color_4);--awb-margin-bottom:6px;--awb-margin-top-small:0px;--awb-margin-right-small:0px;--awb-margin-bottom-small:5px;--awb-margin-left-small:0px;--awb-font-size:22px;\"><h4 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"margin:0;font-size:1em;--fontSize:22;--minFontSize:22;line-height:1.3;\">Check: Is the management system fulfilling its task?<\/h4><\/div><div class=\"fusion-text fusion-text-6 fusion-text-no-margin\" style=\"--awb-content-alignment:left;--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-color:var(--awb-custom_color_5);--awb-margin-bottom:0px;--awb-margin-top-small:0px;--awb-margin-bottom-small:0px;--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>An ISMS (Information Security Management System) is planned and implemented. But that is not enough. Is the organization achieving its goals? Are data and information really effectively protected? Especially in the field of information security, where cybercriminals are constantly finding new ways to attack IT systems, reviewing the management system is one of the most important tasks. Internal audits\u2014checks to see if the system is working reliably\u2014are therefore a vital component, especially with ISO 27001.     <\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-7 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-padding-top:25px;--awb-padding-right:25px;--awb-padding-bottom:25px;--awb-padding-left:25px;--awb-padding-top-small:15px;--awb-padding-right-small:15px;--awb-padding-bottom-small:15px;--awb-padding-left-small:15px;--awb-overflow:hidden;--awb-bg-color:var(--awb-custom_color_18);--awb-bg-color-hover:var(--awb-custom_color_18);--awb-bg-size:cover;--awb-border-color:var(--awb-custom_color_17);--awb-border-top:1px;--awb-border-right:1px;--awb-border-bottom:6px;--awb-border-left:1px;--awb-border-radius:15px 15px 15px 15px;--awb-width-large:83.333333333333%;--awb-margin-top-large:0px;--awb-spacing-right-large:0px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:0px;--awb-width-medium:100%;--awb-spacing-right-medium:20px;--awb-spacing-left-medium:20px;--awb-width-small:100%;--awb-spacing-right-small:20px;--awb-margin-bottom-small:5px;--awb-spacing-left-small:20px;\"><div class=\"fusion-column-wrapper fusion-flex-justify-content-center fusion-content-layout-column\"><div class=\"fusion-builder-row fusion-builder-row-inner fusion-row fusion-flex-align-items-flex-start fusion-flex-align-content-center fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"--awb-min-height:no;--awb-min-height-small:no;--awb-flex-grow:undefined;--awb-flex-grow-medium:undefined;--awb-flex-grow-small:undefined;--awb-flex-shrink:undefined;--awb-flex-shrink-medium:undefined;--awb-flex-shrink-small:undefined;width:calc( 100% + 15px ) !important;max-width:calc( 100% + 15px ) !important;margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column_inner fusion-builder-nested-column-6 fusion-flex-column fusion-flex-align-self-stretch\" style=\"--awb-bg-size:cover;--awb-width-large:150px;--awb-margin-top-large:0px;--awb-spacing-right-large:0px;--awb-margin-bottom-large:0px;--awb-spacing-left-large:7.5px;--awb-width-medium:150px;--awb-order-medium:0;--awb-spacing-right-medium:0px;--awb-spacing-left-medium:7.5px;--awb-width-small:150px;--awb-order-small:0;--awb-spacing-right-small:0px;--awb-spacing-left-small:7.5px;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-image-element \" style=\"--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><span class=\" fusion-imageframe imageframe-none imageframe-4 hover-type-none\" style=\"border-radius:25px;\"><img decoding=\"async\" width=\"200\" height=\"177\" title=\"PDCA-cycle-4-act\" src=\"https:\/\/www.dicisgroup.com\/wp-content\/uploads\/2026\/04\/PDCA-Zyklus-4-Act.png\" alt class=\"img-responsive wp-image-1382\"\/><\/span><\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column_inner fusion-builder-nested-column-7 fusion_builder_column_inner_1_2 1_2 fusion-flex-column\" style=\"--awb-padding-left:30px;--awb-bg-size:cover;--awb-width-large:50%;--awb-flex-grow:1;--awb-margin-top-large:0px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:0px;--awb-spacing-left-large:0px;--awb-width-medium:50%;--awb-order-medium:0;--awb-flex-grow-medium:1;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:0px;--awb-width-small:75%;--awb-order-small:0;--awb-flex-grow-small:1;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:0px;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-7 fusion-sep-none fusion-title-text fusion-title-size-four\" style=\"--awb-text-color:var(--awb-custom_color_4);--awb-margin-bottom:6px;--awb-margin-top-small:0px;--awb-margin-right-small:0px;--awb-margin-bottom-small:5px;--awb-margin-left-small:0px;--awb-font-size:22px;\"><h4 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"margin:0;font-size:1em;--fontSize:22;--minFontSize:22;line-height:1.3;\">Act: Continuous improvement and optimization<\/h4><\/div><div class=\"fusion-text fusion-text-7 fusion-text-no-margin\" style=\"--awb-content-alignment:left;--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-color:var(--awb-custom_color_5);--awb-margin-bottom:0px;--awb-margin-top-small:0px;--awb-margin-bottom-small:0px;--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>ISO 27001 relies on two important principles:<\/p>\n<\/p>\n<ol>\n<li>Learning from mistakes. Security flaws that are discovered are fixed immediately. <\/li>\n<li>The system is constantly improved. Suggestions are actively sought to make the information security management system work even better and more effectively. These can be better technical facilities, more efficient processes, or innovative measures to strengthen information security.  <\/li>\n<\/ol>\n<\/div><\/div><\/div><\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-8 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:60px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-separator fusion-full-width-sep\" style=\"align-self: center;margin-left: auto;margin-right: auto;margin-top:-60px;width:100%;\"><\/div><div class=\"fusion-text fusion-text-8\" style=\"--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-color:var(--awb-custom_color_5);--awb-margin-top:0px;--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>The PDCA cycle is also known from other management systems such as <a href=\"https:\/\/www.dicisgroup.com\/en\/quality-management-explained-simply-fundamentals-for-businesses-dicis-ag\/\">quality management<\/a>. The structure of ISO 27001 is also similar to that of ISO 9001. Therefore, <a href=\"https:\/\/www.dicisgroup.com\/en\/what-are-the-benefits-of-iso-management-systems\/\">management systems<\/a> from the areas of quality, environmental protection, or information security can be very well combined in the form of <a href=\"https:\/\/www.dicisgroup.com\/de\/was-ist-ein-integriertes-managementsystem\/\">integrated management systems<\/a>.  <\/p>\n<p data-start=\"84\" data-end=\"348\">DICIS\u00ae AG offers a modern solution for <a href=\"https:\/\/www.dicisgroup.com\/en\/what-is-iso-27001-certification-simply-explained-dicis-ag\/\">ISO 27001 certification<\/a> that can significantly reduce the effort involved. With the help of an AI assistant, the entire documentation can be created within a few hours\u2014instead of several weeks as was previously the case. <\/p>\n<p data-start=\"350\" data-end=\"467\" data-is-last-node=\"\" data-is-only-node=\"\">Companies can test the solution for 30 days free of charge and be guided step-by-step through the certification process.<\/p>\n<\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-9 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div ><a class=\"fusion-button button-flat button-xlarge button-default fusion-button-default button-1 fusion-button-default-span fusion-button-default-type awb-b-icon-pos-right\" style=\"--button-border-radius-top-left:10px;--button-border-radius-top-right:10px;--button-border-radius-bottom-right:10px;--button-border-radius-bottom-left:10px;\" target=\"_blank\" rel=\"noopener noreferrer\" data-hover=\"icon_position\" href=\"http:\/\/Get%20a%20free%20consultation%20now\"><span class=\"fusion-button-text awb-button__text awb-button__text--default\">START CERTIFICATION NOW<\/span><i class=\"fa-arrow-right fas awb-button__icon awb-button__icon--default button-icon-right\" aria-hidden=\"true\"><\/i><i class=\"fa-arrow-right fas awb-button__icon awb-button__icon--default button-icon-right\" aria-hidden=\"true\"><\/i><\/a><\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-5 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-padding-right:5%;--awb-padding-left:5%;--awb-background-color:var(--awb-custom_color_1);--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"max-width:calc( 1280px + 15px );margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-10 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-8 fusion-sep-none fusion-title-text fusion-title-size-two\" style=\"--awb-margin-top-small:10px;--awb-margin-right-small:10px;--awb-margin-bottom-small:10px;--awb-margin-left-small:10px;--awb-font-size:47px;\"><h2 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"font-family:&quot;Poppins&quot;;font-style:normal;font-weight:800;margin:0;letter-spacing:-1.2px;font-size:1em;--fontSize:47;line-height:1.23;\">Advantages of a <span style=\"color: var(--awb-custom_color_6);\"><span style=\"color: var(--awb-custom_color_20);\">quality management system<\/span> <\/span><\/h2><\/div><div class=\"fusion-text fusion-text-9\" style=\"--awb-content-alignment:left;--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-color:var(--awb-custom_color_5);--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>Why should companies implement a quality management system? The short answer is: because it makes them more professional. But what does more professional mean?<\/p>\n<\/div><ul style=\"--awb-size:16px;--awb-iconcolor:var(--awb-custom_color_34);--awb-textcolor:var(--awb-custom_color_5);--awb-line-height:27.2px;--awb-icon-width:27.2px;--awb-icon-height:27.2px;--awb-icon-margin:11.2px;--awb-content-margin:38.4px;\" class=\"fusion-checklist fusion-checklist-2 fusion-checklist-default type-icons\"><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><strong>Companies gain reliability<\/strong>: The definition of&nbsp;<span class=\"fusion-popover popover-11\" title=\"\" data-animation=\"1\" data-class=\"popover-11\" data-container=\"popover-11\" data-content=\"Erfahren Sie, was Gesch\u00e4ftsprozesse sind und wie Sie sie entwickeln k\u00f6nnen.\" data-delay=\"50\" data-placement=\"top\" data-toggle=\"popover\" data-trigger=\"hover\" data-original-title=\"\"><a href=\"https:\/\/www.dicisgroup.com\/de\/was-sind-geschaeftsprozesse\/\" target=\"_blank\" rel=\"noopener\">business processes<\/a><\/span> ensures that companies can continuously deliver their performance. Regardless of whether those responsible are currently ill or busy with other activities. <\/p>\n<\/div><\/li><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><strong>The company has systematically committed itself to customer orientation<\/strong>. The risk of developing products and services that miss customer needs decreases. <\/p>\n<\/div><\/li><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><strong>Continuous improvement keeps workflows and processes lean<\/strong>. A &nbsp;<span class=\"fusion-popover popover-12\" title=\"\" data-animation=\"1\" data-class=\"popover-12\" data-container=\"popover-12\" data-content=\"Lernen Sie die Bausteine eines Prozessmanagements kennen.\" data-delay=\"50\" data-placement=\"top\" data-toggle=\"popover\" data-trigger=\"hover\" data-original-title=\"\"><a href=\"https:\/\/www.dicisgroup.com\/de\/was-ist-prozessmanagement\/\" target=\"_blank\" rel=\"noopener\">process management<\/a><\/span> system ensures that internal structures and workflows are repeatedly scrutinized and revised.<\/p>\n<\/div><\/li><\/ul><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-11 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:20px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-text fusion-text-10\" style=\"--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-color:var(--awb-custom_color_5);--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>Companies that have achieved <a href=\"https:\/\/www.dicisgroup.com\/en\/iso-9001-certification-online-fast-digital-bureaucracy-free\/\">ISO 9001 certification<\/a> are reliable and valued business partners. Accordingly, they can expand their market share and scale their services. This means nothing other than: the company is prepared for growth. Companies that have established a quality management system benefit from greater growth potential while simultaneously reducing costs.   <\/p>\n<\/div><div ><a class=\"fusion-button button-flat button-xlarge button-default fusion-button-default button-2 fusion-button-default-span fusion-button-default-type awb-b-icon-pos-right\" style=\"--button-border-radius-top-left:10px;--button-border-radius-top-right:10px;--button-border-radius-bottom-right:10px;--button-border-radius-bottom-left:10px;\" target=\"_blank\" rel=\"noopener noreferrer\" data-hover=\"icon_position\" href=\"https:\/\/www.dicisgroup.com\/en\/iso-27001-certification-online-fast-easy-dicis\/\"><span class=\"fusion-button-text awb-button__text awb-button__text--default\">FIND OUT ABOUT ISO 9001 CERTIFICATION NOW<\/span><i class=\"fa-arrow-right fas awb-button__icon awb-button__icon--default button-icon-right\" aria-hidden=\"true\"><\/i><i class=\"fa-arrow-right fas awb-button__icon awb-button__icon--default button-icon-right\" aria-hidden=\"true\"><\/i><\/a><\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-6 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-padding-right:5%;--awb-padding-left:5%;--awb-background-color:var(--awb-custom_color_1);--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"max-width:calc( 1280px + 15px );margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-12 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-9 fusion-sep-none fusion-title-text fusion-title-size-two\" style=\"--awb-margin-top-small:10px;--awb-margin-right-small:10px;--awb-margin-bottom-small:10px;--awb-margin-left-small:10px;--awb-font-size:47px;\"><h2 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"font-family:&quot;Poppins&quot;;font-style:normal;font-weight:800;margin:0;letter-spacing:-1.2px;font-size:1em;--fontSize:47;line-height:1.23;\">How is ISO 27001 <span style=\"color: var(--awb-custom_color_6);\">structured?<\/span><\/h2><\/div><div class=\"fusion-text fusion-text-11\" style=\"--awb-content-alignment:left;\"><p>ISO 27001 follows the so-called High Level Structure and is structured similarly to ISO 9001 or ISO 14001. The actual requirements are in chapters 4 to 10. Additionally, there is an Annex with 93 measures that you must implement or justify to fully cover information security. <\/p>\n<p data-start=\"375\" data-end=\"660\">The standard is structured so that you can simply proceed step by step. You start by understanding your company, establish rules, and ensure that work is carried out securely in everyday life. Then you regularly check whether everything is working and improve your system.  <\/p>\n<p data-start=\"662\" data-end=\"755\"><strong>The following overview shows you quite simply what you specifically need to do in each chapter:<\/strong><\/p>\n<\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-13 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:0px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\">\n<div class=\"table-2\">\n<table style=\"height: 183px;\" width=\"1160\">\n<thead>\n<tr>\n<th style=\"text-align: left;\">Chapter<\/th>\n<th style=\"text-align: left;\">What you specifically need to do in this chapter<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Chapter 4 \u2013 Context<\/strong><\/td>\n<td>Consider: Which data is important? What can happen? Where do you deploy your security system?<\/td>\n<\/tr>\n<tr>\n<td><strong>Chapter 5 \u2013 Leadership<\/strong><\/td>\n<td>Ensure that the topic is important and everyone knows: data must be protected.<\/td>\n<\/tr>\n<tr>\n<td><strong>Chapter 6 \u2013 Planning<\/strong><\/td>\n<td>Consider: What can go wrong and how do we prevent it?<\/td>\n<\/tr>\n<tr>\n<td><strong>Chapter 7 \u2013 Support<\/strong><\/td>\n<td>Ensure that your employees know what to do and have the right resources.<\/td>\n<\/tr>\n<tr>\n<td><strong>Chapter 8 \u2013 Operation<\/strong><\/td>\n<td>Define how data is handled securely in everyday work.<\/td>\n<\/tr>\n<tr>\n<td align=\"left\"><strong>Chapter 9 \u2013 Evaluation<\/strong><\/td>\n<td align=\"left\">Check regularly: Is it all working or are there problems?<\/td>\n<\/tr>\n<tr>\n<td align=\"left\"><strong>Chapter 10 \u2013 Improvement<\/strong><\/td>\n<td align=\"left\">If something is not going well, improve it step by step.<\/td>\n<\/tr>\n<tr>\n<td align=\"left\"><strong>Annex A \u2013 Measures<\/strong><\/td>\n<td align=\"left\">Implement specific protective measures: rules, training, securing access, and protecting IT.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<div class=\"fusion-text fusion-text-12\" style=\"--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-margin-top:20px;--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p data-start=\"68\" data-end=\"351\">DICIS\u00ae AG has developed an innovative and particularly simple way to achieve <a href=\"https:\/\/www.dicisgroup.com\/en\/iso-27001-certification-online-fast-easy-dicis\/\">ISO 27001 certification<\/a>\u2014specifically for small companies. Instead of complex projects and weeks of preparation, you use an AI-supported tool that guides you step-by-step through the implementation. <\/p>\n<p data-start=\"353\" data-end=\"565\">Through targeted questions, the system automatically recognizes the relevant requirements and creates the necessary documentation in a short time. Certification then takes place efficiently via an online audit. <\/p>\n<p data-start=\"567\" data-end=\"725\" data-is-last-node=\"\" data-is-only-node=\"\">This makes ISO 27001 certification significantly easier and faster. You can start immediately and test the certification tool for 30 days free of charge. <\/p>\n<\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-14 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div ><a class=\"fusion-button button-flat button-xlarge button-default fusion-button-default button-3 fusion-button-default-span fusion-button-default-type awb-b-icon-pos-right btn-outline\" style=\"--button-border-radius-top-left:10px;--button-border-radius-top-right:10px;--button-border-radius-bottom-right:10px;--button-border-radius-bottom-left:10px;\" target=\"_self\" data-hover=\"icon_position\" href=\"http:\/\/Get%20a%20free%20consultation%20now\"><span class=\"fusion-button-text awb-button__text awb-button__text--default\">START CERTIFICATION NOW<\/span><i class=\"fa-arrow-right fas awb-button__icon awb-button__icon--default button-icon-right\" aria-hidden=\"true\"><\/i><i class=\"fa-arrow-right fas awb-button__icon awb-button__icon--default button-icon-right\" aria-hidden=\"true\"><\/i><\/a><\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-7 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-padding-right:5%;--awb-padding-left:5%;--awb-background-color:var(--awb-custom_color_1);--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"max-width:calc( 1280px + 15px );margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-15 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-10 fusion-sep-none fusion-title-text fusion-title-size-two\" style=\"--awb-margin-top-small:10px;--awb-margin-right-small:10px;--awb-margin-bottom-small:10px;--awb-margin-left-small:10px;--awb-font-size:47px;\"><h2 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"font-family:&quot;Poppins&quot;;font-style:normal;font-weight:800;margin:0;letter-spacing:-1.2px;font-size:1em;--fontSize:47;line-height:1.23;\">What do I need to <span style=\"color: var(--awb-custom_color_20);\">implement<\/span> in ISO 27001 Chapter 4.1 (Context of the Organization)?<\/h2><\/div><div class=\"fusion-text fusion-text-13\" style=\"--awb-content-alignment:left;--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>In Chapter 4.1, ISO 27001 creates the basis for an information security management system to be implemented at all. Organizations create a list of internal and external issues that are relevant.  <\/p>\n<\/div><ul style=\"--awb-size:16px;--awb-iconcolor:var(--awb-custom_color_34);--awb-textcolor:var(--awb-custom_color_5);--awb-line-height:27.2px;--awb-icon-width:27.2px;--awb-icon-height:27.2px;--awb-icon-margin:11.2px;--awb-content-margin:38.4px;\" class=\"fusion-checklist fusion-checklist-3 fusion-checklist-default type-icons\"><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><b>Internal issues: This is about dealing with all areas in which information security plays a role. For example: securing the WLAN, security of production facilities, data and information security in employees&#8217; home offices, etc. <\/b><\/p>\n<\/div><\/li><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><b>External issues: Here, external factors influencing information security are considered. Create a list of the topics that are relevant to you and your information security management system. For example, new data protection laws, security updates for the software you use, reports on cybercriminal attack strategies, or innovative security technologies.  <\/b><\/p>\n<\/div><\/li><\/ul><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-16 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-text fusion-text-14\" style=\"--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-color:var(--awb-custom_color_5);--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>ISO 27001 does not specify which internal and external issues you must monitor and analyze. Ultimately, it is a question of relevance. But at its core, it is quite simple. You need to clarify what potential threats exist, what requirements you must follow, and which areas of your organization are affected.<\/p>\n<\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-8 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-padding-right:5%;--awb-padding-left:5%;--awb-background-color:var(--awb-custom_color_1);--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"max-width:calc( 1280px + 15px );margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-17 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-11 fusion-sep-none fusion-title-text fusion-title-size-two\" style=\"--awb-margin-top-small:10px;--awb-margin-right-small:10px;--awb-margin-bottom-small:10px;--awb-margin-left-small:10px;--awb-font-size:47px;\"><h2 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"font-family:&quot;Poppins&quot;;font-style:normal;font-weight:800;margin:0;letter-spacing:-1.2px;font-size:1em;--fontSize:47;line-height:1.23;\">Which interest groups (so-called &#8220;interested parties&#8221;) are <span style=\"color: var(--awb-custom_color_20);\">relevant for ISO 27001?<\/span><\/h2><\/div><div class=\"fusion-text fusion-text-15\" style=\"--awb-content-alignment:left;--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>When it comes to information security, different groups have different interests.<\/p>\n<\/div><ul style=\"--awb-size:16px;--awb-iconcolor:var(--awb-custom_color_34);--awb-textcolor:var(--awb-custom_color_5);--awb-line-height:27.2px;--awb-icon-width:27.2px;--awb-icon-height:27.2px;--awb-icon-margin:11.2px;--awb-content-margin:38.4px;\" class=\"fusion-checklist fusion-checklist-4 fusion-checklist-default type-icons\"><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><b>Owners and investors look for the best possible protection of their invested capital, but pay attention to the economic efficiency of a solution.<\/b><\/p>\n<\/div><\/li><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><b>Employees expect that the solutions used<\/b><\/p>\n<ol>\n<li style=\"list-style-type: none;\">\n<ol>\n<li><b>are easy to use and<\/b><\/li>\n<li><b>do not restrict their productivity.<\/b><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<\/div><\/li><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><b>The works council wants to ensure that records of employee activities are only processed for the purpose for which they were collected.<\/b><\/p>\n<\/div><\/li><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><b>Customers want clarity on how their data is processed and how their information is protected.<\/b><\/p>\n<\/div><\/li><\/ul><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-18 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-text fusion-text-16\" style=\"--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>Countless other interest groups could be listed. ISO 27001 requires organizations to actively engage with the different interests and recognize potential areas of tension that exist in the management of information security.<\/p>\n<\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-9 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-padding-right:5%;--awb-padding-left:5%;--awb-background-color:var(--awb-custom_color_1);--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"max-width:calc( 1280px + 15px );margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-19 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-12 fusion-sep-none fusion-title-text fusion-title-size-two\" style=\"--awb-margin-top-small:10px;--awb-margin-right-small:10px;--awb-margin-bottom-small:10px;--awb-margin-left-small:10px;--awb-font-size:47px;\"><h2 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"font-family:&quot;Poppins&quot;;font-style:normal;font-weight:800;margin:0;letter-spacing:-1.2px;font-size:1em;--fontSize:47;line-height:1.23;\">How do I define the scope (Chapter 4.3) of <span style=\"color: var(--awb-custom_color_20);\">ISO 27001?<\/span><\/h2><\/div><div class=\"fusion-text fusion-text-17\" style=\"--awb-content-alignment:left;--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>Contrary to a widespread assumption, ISO 27001 does not automatically have to be implemented for an entire organization. It is even conceivable that you implement ISO 27001 for only a few processes, for example, for all workflows and activities surrounding the use of a CRM system (Customer Relationship Management system). Therefore, it is necessary to clearly define the scope of ISO 27001.<\/p>\n<\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-20 fusion_builder_column_5_6 5_6 fusion-flex-column fusion-flex-align-self-stretch\" style=\"--awb-padding-top:25px;--awb-padding-right:25px;--awb-padding-bottom:25px;--awb-padding-left:25px;--awb-overflow:hidden;--awb-bg-color:var(--awb-custom_color_18);--awb-bg-color-hover:var(--awb-custom_color_18);--awb-bg-size:cover;--awb-border-color:var(--awb-custom_color_17);--awb-border-top:1px;--awb-border-right:1px;--awb-border-bottom:6px;--awb-border-left:1px;--awb-border-radius:25px 25px 25px 25px;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:20px;--awb-spacing-left-large:7.5px;--awb-width-medium:100%;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\"><div class=\"fusion-column-wrapper fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-builder-row fusion-builder-row-inner fusion-row fusion-flex-align-items-flex-start fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"--awb-flex-grow:0;--awb-flex-grow-medium:0;--awb-flex-grow-small:0;--awb-flex-shrink:0;--awb-flex-shrink-medium:0;--awb-flex-shrink-small:0;width:calc( 100% + 15px ) !important;max-width:calc( 100% + 15px ) !important;margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column_inner fusion-builder-nested-column-8 fusion_builder_column_inner_1_1 1_1 fusion-flex-column fusion-flex-align-self-center\" style=\"--awb-bg-blend:overlay;--awb-bg-size:cover;--awb-width-large:100%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:0px;--awb-spacing-left-large:7.5px;--awb-width-medium:75%;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\"><div class=\"fusion-column-wrapper fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-13 fusion-sep-none fusion-title-text fusion-title-size-four\" style=\"--awb-text-color:var(--awb-custom_color_4);--awb-margin-top-small:10px;--awb-margin-right-small:10px;--awb-margin-bottom-small:10px;--awb-margin-left-small:10px;--awb-font-size:var(--awb-custom_typography_5-font-size);\"><h4 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"font-family:var(--awb-custom_typography_5-font-family);font-weight:var(--awb-custom_typography_5-font-weight);font-style:var(--awb-custom_typography_5-font-style);margin:0;letter-spacing:var(--awb-custom_typography_5-letter-spacing);text-transform:var(--awb-custom_typography_5-text-transform);font-size:1em;--fontSize:24;line-height:1.4;\">Practical tip!<\/h4><\/div><div class=\"fusion-text fusion-text-18 fusion-text-no-margin\" style=\"--awb-content-alignment:left;--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-margin-bottom:0px;--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>If you are dealing with ISO 27001 for the first time: start with a small sub-area. Initially implement the ISMS requirements only for certain processes, one location, one department, or one team. This way, you get to know the logic behind ISO 27001 and learn to master the complexity. Gradually expand ISO 27001 to other areas.<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-10 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-padding-right:5%;--awb-padding-left:5%;--awb-background-color:var(--awb-custom_color_1);--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"max-width:calc( 1280px + 15px );margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-21 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-14 fusion-sep-none fusion-title-text fusion-title-size-two\" style=\"--awb-margin-top-small:10px;--awb-margin-right-small:10px;--awb-margin-bottom-small:10px;--awb-margin-left-small:10px;--awb-font-size:47px;\"><h2 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"font-family:&quot;Poppins&quot;;font-style:normal;font-weight:800;margin:0;letter-spacing:-1.2px;font-size:1em;--fontSize:47;line-height:1.23;\">What do I need to <span style=\"color: var(--awb-custom_color_20);\">do<\/span> in Chapter 4.4 (The Information Security Management System)?<\/h2><\/div><div class=\"fusion-text fusion-text-19\" style=\"--awb-content-alignment:left;--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>This chapter is the concretization of 4.3. Which processes and workflows does your ISMS include? Create a list of all relevant processes and workflows that are relevant to your ISMS. There are classic standard workflows that affect practically every organization: for example,<\/p>\n<\/div><ul style=\"--awb-size:16px;--awb-iconcolor:var(--awb-custom_color_34);--awb-textcolor:var(--awb-custom_color_5);--awb-line-height:27.2px;--awb-icon-width:27.2px;--awb-icon-height:27.2px;--awb-icon-margin:11.2px;--awb-content-margin:38.4px;\" class=\"fusion-checklist fusion-checklist-5 fusion-checklist-default type-icons\"><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><b>the creation and deletion of internal users,<\/b><\/p>\n<\/div><\/li><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><b>the expansion or restriction of access rights,<\/b><\/p>\n<\/div><\/li><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><b>as well as the procedure for security flaws identified by management.<\/b><\/p>\n<\/div><\/li><\/ul><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-22 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-text fusion-text-20\" style=\"--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>Here, ISO 27001 requires clear processes and workflows. With the digital information security management system from Innolytics AG, you can fulfill these requirements quickly and easily.<\/p>\n<\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-11 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-padding-right:5%;--awb-padding-left:5%;--awb-background-color:var(--awb-custom_color_1);--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"max-width:calc( 1280px + 15px );margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-23 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-15 fusion-sep-none fusion-title-text fusion-title-size-two\" style=\"--awb-margin-top-small:10px;--awb-margin-right-small:10px;--awb-margin-bottom-small:10px;--awb-margin-left-small:10px;--awb-font-size:47px;\"><h2 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"font-family:&quot;Poppins&quot;;font-style:normal;font-weight:800;margin:0;letter-spacing:-1.2px;font-size:1em;--fontSize:47;line-height:1.23;\">What does ISO 27001 require from leadership? <span style=\"color: var(--awb-custom_color_20);\">(Chapter 5.1)<\/span><\/h2><\/div><div class=\"fusion-text fusion-text-21\" style=\"--awb-content-alignment:left;--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>Managers have a special role within organizations. They are responsible for considering information security in all areas of daily work. They are the ones who define information security goals, develop measures to implement them, and support employees in acquiring the necessary skills. Chapter 5.1 explicitly lists the requirements for managers in organizations.    <\/p>\n<\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-12 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-padding-right:5%;--awb-padding-left:5%;--awb-background-color:var(--awb-custom_color_1);--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"max-width:calc( 1280px + 15px );margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-24 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-16 fusion-sep-none fusion-title-text fusion-title-size-two\" style=\"--awb-margin-top-small:10px;--awb-margin-right-small:10px;--awb-margin-bottom-small:10px;--awb-margin-left-small:10px;--awb-font-size:47px;\"><h2 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"font-family:&quot;Poppins&quot;;font-style:normal;font-weight:800;margin:0;letter-spacing:-1.2px;font-size:1em;--fontSize:47;line-height:1.23;\">What roles and responsibilities (Chapter 5.2) are there in <span style=\"color: var(--awb-custom_color_20);\">ISO 27001?<\/span><\/h2><\/div><div class=\"fusion-text fusion-text-22\" style=\"--awb-content-alignment:left;--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>ISO 27001, like all <a href=\"https:\/\/www.innolytics.de\/was-ist-ein-managementsystem\/\" target=\"_blank\" rel=\"noopener\">management systems<\/a>, requires that there are fixed responsibilities and jurisdictions for certain tasks. What these look like in detail is not explicitly prescribed in the standard. However, it is important that roles and responsibilities are specifically named. It is therefore not enough to merely point out in general terms that, for example, a certain department should think about information security. In an information security management system (ISMS), specific persons or functions are named.    <\/p>\n<\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-13 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-padding-right:5%;--awb-padding-left:5%;--awb-background-color:var(--awb-custom_color_1);--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"max-width:calc( 1280px + 15px );margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-25 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-17 fusion-sep-none fusion-title-text fusion-title-size-two\" style=\"--awb-margin-top-small:10px;--awb-margin-right-small:10px;--awb-margin-bottom-small:10px;--awb-margin-left-small:10px;--awb-font-size:47px;\"><h2 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"font-family:&quot;Poppins&quot;;font-style:normal;font-weight:800;margin:0;letter-spacing:-1.2px;font-size:1em;--fontSize:47;line-height:1.23;\">What competencies do employees need with regard to information security? <span style=\"color: var(--awb-custom_color_20);\">(Chapter 7.3)<\/span><\/h2><\/div><div class=\"fusion-text fusion-text-23\" style=\"--awb-content-alignment:left;--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>Organizations must ensure that the persons responsible have the necessary know-how to fulfill their tasks. At its core, this is a very logical requirement. What is the point of organizations setting goals for information security, developing measures, and naming responsible persons if no one then has the necessary expertise to carry this out?  <\/p>\n<\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-14 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-padding-right:5%;--awb-padding-left:5%;--awb-background-color:var(--awb-custom_color_1);--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"max-width:calc( 1280px + 15px );margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-26 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-18 fusion-sep-none fusion-title-text fusion-title-size-two\" style=\"--awb-margin-top-small:10px;--awb-margin-right-small:10px;--awb-margin-bottom-small:10px;--awb-margin-left-small:10px;--awb-font-size:47px;\"><h2 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"font-family:&quot;Poppins&quot;;font-style:normal;font-weight:800;margin:0;letter-spacing:-1.2px;font-size:1em;--fontSize:47;line-height:1.23;\">What does information security assessment mean?<br \/><span style=\"color: var(--awb-custom_color_20);\">(Chapter 8.2: Risk Analysis and Assessment)<\/span><\/h2><\/div><div class=\"fusion-text fusion-text-24\" style=\"--awb-content-alignment:left;--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>ISO 27001 requires companies to regularly check their own IT infrastructure (this includes not only internal networks and devices connected to the Internet, but also employees&#8217; smartphones and even the home office workstation). Everything can become a gateway for cybercriminals. And thus represents a security risk.  <\/p>\n<p>ISO 27001 does not prescribe a specific form of risk analysis. However, there are security criteria listed in the standard. In addition, there are standards such as the <a href=\"https:\/\/www.bsi.bund.de\/DE\/Themen\/Unternehmen-und-Organisationen\/Standards-und-Zertifizierung\/IT-Grundschutz\/BSI-Standards\/bsi-standards_node.html\" target=\"_blank\" rel=\"noopener noreferrer\">BSI standard<\/a> that are compatible with ISO 27001.  <\/p>\n<\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-15 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-padding-right:5%;--awb-padding-left:5%;--awb-background-color:var(--awb-custom_color_1);--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"max-width:calc( 1280px + 15px );margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-27 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-19 fusion-sep-none fusion-title-text fusion-title-size-two\" style=\"--awb-margin-top-small:10px;--awb-margin-right-small:10px;--awb-margin-bottom-small:10px;--awb-margin-left-small:10px;--awb-font-size:47px;\"><h2 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"font-family:&quot;Poppins&quot;;font-style:normal;font-weight:800;margin:0;letter-spacing:-1.2px;font-size:1em;--fontSize:47;line-height:1.23;\">Which information security audits does ISO 27001 require <span style=\"color: var(--awb-custom_color_20);\">(Chapter 9.2)?<\/span><\/h2><\/div><div class=\"fusion-text fusion-text-25\" style=\"--awb-content-alignment:left;--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>Internal audits are a central requirement of management systems such as a <a href=\"https:\/\/www.innolytics.de\/was-ist-ein-qualitaetsmanagementsystem\/\" target=\"_blank\" rel=\"noopener\">quality management system<\/a> according to <a href=\"https:\/\/www.innolytics.de\/was-ist-iso-9001-2015\/\" target=\"_blank\" rel=\"noopener\">ISO 9001:2015<\/a>. What is it all about? <\/p>\n<\/div><ul style=\"--awb-size:16px;--awb-iconcolor:var(--awb-custom_color_34);--awb-textcolor:var(--awb-custom_color_5);--awb-line-height:27.2px;--awb-icon-width:27.2px;--awb-icon-height:27.2px;--awb-icon-margin:11.2px;--awb-content-margin:38.4px;\" class=\"fusion-checklist fusion-checklist-6 fusion-checklist-default type-icons\"><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><b>Audits are internal reviews that must be planned and carried out.<\/b><\/p>\n<\/div><\/li><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><b>Behind this is the philosophy: if you don&#8217;t check something regularly and in a planned manner, it eventually falls out of focus and is finally forgotten.<\/b><\/p>\n<\/div><\/li><li class=\"fusion-li-item\" style=\"\"><span class=\"icon-wrapper circle-no\"><i class=\"fusion-li-icon awb-icon-check\" aria-hidden=\"true\"><\/i><\/span><div class=\"fusion-li-item-content\">\n<p><b>But it is precisely this form of negligence that ultimately increases attack risks and can subsequently lead to damage.<\/b><\/p>\n<\/div><\/li><\/ul><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-28 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-text fusion-text-26\" style=\"--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>ISO 27001 does not prescribe the form in which these audits should be carried out. For this, there is the special standard &nbsp;<a href=\"https:\/\/de.wikipedia.org\/wiki\/ISO_19011\" target=\"_blank\" rel=\"noopener noreferrer\">ISO 19011 (Guidelines for auditing management systems)<\/a>, which provides for certain criteria. The most important are the technical competence of internal auditors and independence. These are actually self-evident requirements: what good is a glossed-over audit in which security risks\u2014e.g., for corporate political reasons\u2014are not uncovered, if vulnerabilities for possible attacks on information security remain as a result?  <\/p>\n<\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-16 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-padding-right:5%;--awb-padding-left:5%;--awb-background-color:var(--awb-custom_color_1);--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-justify-content-center fusion-flex-content-wrap\" style=\"max-width:calc( 1280px + 15px );margin-left: calc(-15px \/ 2 );margin-right: calc(-15px \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-29 fusion_builder_column_5_6 5_6 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:83.333333333333%;--awb-margin-top-large:10px;--awb-spacing-right-large:7.5px;--awb-margin-bottom-large:10px;--awb-spacing-left-large:7.5px;--awb-width-medium:83.333333333333%;--awb-order-medium:0;--awb-spacing-right-medium:7.5px;--awb-spacing-left-medium:7.5px;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:7.5px;--awb-spacing-left-small:7.5px;\" data-scroll-devices=\"small-visibility,medium-visibility,large-visibility\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-title title fusion-title-20 fusion-sep-none fusion-title-text fusion-title-size-two\" style=\"--awb-margin-top-small:10px;--awb-margin-right-small:10px;--awb-margin-bottom-small:10px;--awb-margin-left-small:10px;--awb-font-size:47px;\"><h2 class=\"fusion-title-heading title-heading-left fusion-responsive-typography-calculated\" style=\"font-family:&quot;Poppins&quot;;font-style:normal;font-weight:800;margin:0;letter-spacing:-1.2px;font-size:1em;--fontSize:47;line-height:1.23;\">How must I improve information security? <span style=\"color: var(--awb-custom_color_20);\">(ISO 27001 Chapter 10.1)<\/span><\/h2><\/div><div class=\"fusion-text fusion-text-27\" style=\"--awb-content-alignment:left;--awb-font-size:var(--awb-custom_typography_2-font-size);--awb-line-height:var(--awb-custom_typography_2-line-height);--awb-letter-spacing:var(--awb-custom_typography_2-letter-spacing);--awb-text-transform:var(--awb-custom_typography_2-text-transform);--awb-text-font-family:var(--awb-custom_typography_2-font-family);--awb-text-font-weight:var(--awb-custom_typography_2-font-weight);--awb-text-font-style:var(--awb-custom_typography_2-font-style);\"><p>ISO 27001\u2014like all certifiable standards in the ISO family\u2014is based on the philosophy of &#8220;learning from mistakes.&#8221; Chapter 10.1 therefore establishes a binding approach to dealing with identified vulnerabilities and security flaws. They should serve to improve the overall system.   <\/p>\n<p>This list is not exhaustive. In practice, it is supplemented by security criteria. But it gives a good overview of how the management system is structured and what requirements are placed on companies seeking ISO 27001 certification.  <\/p>\n<\/div><\/div><\/div><\/div><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"100-width.php","meta":{"footnotes":""},"class_list":["post-11271","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.dicisgroup.com\/en\/wp-json\/wp\/v2\/pages\/11271","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dicisgroup.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.dicisgroup.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.dicisgroup.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dicisgroup.com\/en\/wp-json\/wp\/v2\/comments?post=11271"}],"version-history":[{"count":3,"href":"https:\/\/www.dicisgroup.com\/en\/wp-json\/wp\/v2\/pages\/11271\/revisions"}],"predecessor-version":[{"id":11274,"href":"https:\/\/www.dicisgroup.com\/en\/wp-json\/wp\/v2\/pages\/11271\/revisions\/11274"}],"wp:attachment":[{"href":"https:\/\/www.dicisgroup.com\/en\/wp-json\/wp\/v2\/media?parent=11271"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}