This web page is part of a series on risk management. It describes the essential features of an information security  management system (ISMS).

An effective ISMS will:

• keep you abreast of new threats and vulnerabilities, and assist you to take care of them 

• allow you to deal with security incidents and near misses, and turn the media into a marketing advantage

• tell you when your policies and procedures are not being implemented, in time for you to do something about it before it is too late 

• allow you to work out what those policies and procedures ought to be in the first place, and to do so in accordance with best practice and good risk management.

An ISMS gives you the means to take charge, maintain and improve security. It is part of your internal control system

Click the "next" button to continue the tour. Click "back" to retrace your steps.