Information Security Principles

Learn QHSE / Information Security / Information Security Principles

What are the information security principles?

The 10 principles that fall under the ISO 27001 Information Security Management Standard are:

10-principles-of-ISO-27001

A detailed explanation of these principles can be found here:

  1. Analysing the Protection of Your Information and then Applying Controls
  2. Awareness of the need for information security
  3. Assignment of Responsibility for Information Security
  4. Incorporating management commitment and the interests of stakeholders
  5. Enhancing Societal Values
  6. Risk assessments determining appropriate controls to reach acceptable levels of risk
  7. Security incorporated as an essential element of information networks and systems
  8. Active prevention and detection of information security incidents
  9. Ensuring a comprehensive approach to information security management
  10. Continual reassessment of information security and making of modifications as appropriate

2024 Copyright. All rights reserved. Privacy policy.