thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

Information Security Management System (ISMS)

Systematic, risk-based management system for protecting information through policies, processes, and controls.

Definition

An ISMS covers people, processes, and technology and is governed by leadership commitment, risk assessment and treatment, performance evaluation, and continual improvement. ISO/IEC 27001 defines its requirements. The ISMS scope must be documented and justified.

Example

An ISMS scope covers the company's cloud platform, support operations, and two office locations.

Exam tip

Scope is a mandatory documented item; exclusions must be justified.

Related terms