Today, Information Security is no longer just a technological problem BUT a business issue. Information is an asset which, like other important business assets, has value to an organisation and consequently needs to be suitably protected. The surest way to address this issue would be by adopting a holistic and proactive approach to security. One such internationally renowned best practice or standard that can be looked at as a guide would be is the ISO 27001 standard. 

 

ISO 27001 is an information security management system standard that helps organisations to establish policies and objectives to help protect those assets within a sustainable framework. Basically it means that this standard allows an organisation or an entity to review all their assets (business processes, information assets & technology assets), understand their risks and implement the right policies in order to minimise their risk profiles. Many ICT organisations are strong in technology assets protection but unfortunately are not in the other two areas mentioned above. The benefits are in abundance, aside from being certified to an international standard, certification allows companies to differentiate themselves and develop competitive advantage. In some cases, they even manage to reduce insurance premiums by demonstrating compliance with an international standard.