From the course: ISO 27001:2022-Compliant Cybersecurity: Getting Started

Unlock the full course today

Join today to access over 22,700 courses taught by industry experts or purchase this course individually.

Information security objectives and planning to achieve them (Clause 6.2)

Information security objectives and planning to achieve them (Clause 6.2)

From the course: ISO 27001:2022-Compliant Cybersecurity: Getting Started

Start my 1-month free trial

Information security objectives and planning to achieve them (Clause 6.2)

“

- [Instructor] It's hard to hit your targets if you don't know what you're aiming for. In this video, you'll learn about Clause 6.2 of ISO 27001 and why defining your security objectives and building a plan to achieve them is so important to comply with the standard. Clause 6.2 is called Information Security Objectives and Planning to Achieve Them. Think of your security objectives as the goals of your information security management system, or ISMS. What is your ISMS trying to achieve? And how will you know when the goals have been achieved? Clause 6.2 requires that your information security objectives must be consistent with your information security policy, be measurable, if possible, take into consideration any information security requirements and results from your risk assessment and risk treatment, be communicated, and be updated as needed. Here are some ways to come up with information security objectives for…

Contents