{"id":12189,"date":"2021-10-26T14:56:51","date_gmt":"2021-10-26T12:56:51","guid":{"rendered":"https:\/\/www.robin-data.io\/?p=12189"},"modified":"2025-03-24T13:40:26","modified_gmt":"2025-03-24T12:40:26","slug":"isms-definition-what-is-an-information-security-management-system","status":"publish","type":"post","link":"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/isms-definition-what-is-an-information-security-management-system","title":{"rendered":"ISMS: definition, implementation, standards"},"content":{"rendered":"<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-jbitkp-992ca73f8071f7d9230900e6e17003ff\">\n.flex_column.av-jbitkp-992ca73f8071f7d9230900e6e17003ff{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div  class='flex_column av-jbitkp-992ca73f8071f7d9230900e6e17003ff av_one_full  avia-builder-el-0  el_before_av_one_full  avia-builder-el-first  first flex_column_div av-zero-column-padding'     ><p><section  class='av_textblock_section av-kr4lyt6p-019fff3ca5e7c7b3b520e8a116f22e57'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p><a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\">Data Protection Academy<\/a> \u00bb <a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\">Data Protection Wiki<\/a> \u00bb <strong>Information Security Management System<\/strong><\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-4q7aswp-f8cdaffbd18444c1e381ad302acc0191\">\n.avia-image-container.av-4q7aswp-f8cdaffbd18444c1e381ad302acc0191 img.avia_image{\nbox-shadow:none;\n}\n.avia-image-container.av-4q7aswp-f8cdaffbd18444c1e381ad302acc0191 .av-image-caption-overlay-center{\ncolor:#ffffff;\n}\n<\/style>\n<div  class='avia-image-container av-4q7aswp-f8cdaffbd18444c1e381ad302acc0191 av-styling- avia-align-left  avia-builder-el-2  el_after_av_textblock  el_before_av_hr'   itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\" ><div class=\"avia-image-container-inner\"><div class=\"avia-image-overlay-wrap\"><img decoding=\"async\" fetchpriority=\"high\" class='wp-image-14055 avia-img-lazy-loading-not-14055 avia_image' src=\"https:\/\/media.robin-data.io\/2022\/05\/23150310\/Datenschutzpanne.jpg\" alt='ISMS Definition: What is an Information Security Management System?' title=''  height=\"343\" width=\"685\"  itemprop=\"thumbnailUrl\" srcset=\"https:\/\/media.robin-data.io\/2022\/05\/23150310\/Datenschutzpanne.jpg 685w, https:\/\/media.robin-data.io\/2022\/05\/23150310\/Datenschutzpanne-300x150.jpg 300w, https:\/\/media.robin-data.io\/2022\/05\/23150310\/Datenschutzpanne-18x9.jpg 18w\" sizes=\"(max-width: 685px) 100vw, 685px\" \/><\/div><\/div><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-4ittm9l-18139ec052462145c98b1b9993f3f408\">\n#top .hr.hr-invisible.av-4ittm9l-18139ec052462145c98b1b9993f3f408{\nheight:10px;\n}\n<\/style>\n<div  class='hr av-4ittm9l-18139ec052462145c98b1b9993f3f408 hr-invisible  avia-builder-el-3  el_after_av_image  el_before_av_heading'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-dpc0jd-7a218866631ced13c1b1a53f641c66bc\">\n#top .av-special-heading.av-dpc0jd-7a218866631ced13c1b1a53f641c66bc{\npadding-bottom:10px;\ncolor:#303440;\n}\nbody .av-special-heading.av-dpc0jd-7a218866631ced13c1b1a53f641c66bc .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-dpc0jd-7a218866631ced13c1b1a53f641c66bc .special-heading-inner-border{\nborder-color:#303440;\n}\n.av-special-heading.av-dpc0jd-7a218866631ced13c1b1a53f641c66bc .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  class='av-special-heading av-dpc0jd-7a218866631ced13c1b1a53f641c66bc av-special-heading-h1 custom-color-heading blockquote modern-quote  avia-builder-el-4  el_after_av_hr  el_before_av_hr'><h1 class='av-special-heading-tag'  itemprop=\"headline\"  >ISMS Definition: What is an Information Security Management System?<\/h1><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-3lbru55-2daea1b691b62e1475133fcb020d657b\">\n#top .hr.hr-invisible.av-3lbru55-2daea1b691b62e1475133fcb020d657b{\nheight:10px;\n}\n<\/style>\n<div  class='hr av-3lbru55-2daea1b691b62e1475133fcb020d657b hr-invisible  avia-builder-el-5  el_after_av_heading  el_before_av_textblock'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n<section  class='av_textblock_section av-30ll9o9-edbfbfb0daa2a73ce2ac976607e7b1d5'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p>An information security management system (ISMS) defines rules and methods for ensuring, reviewing and improving information security. Information security officers use the ISMS to control technical and organisational IT security measures and regularly monitor the implementation of the planned measures in accordance with the requirements of the ISO\/IEC 2700x series of standards.<\/p>\n<p>In the following article, you will find all the information you need on the information security management system, the distinction from the data protection management system, tips on implementing the ISMS and an overview of important norms and standards.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-2gq8yc9-2b2c47a66841debbf790d9018853a9f2\">\n#top .av-special-heading.av-2gq8yc9-2b2c47a66841debbf790d9018853a9f2{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-2gq8yc9-2b2c47a66841debbf790d9018853a9f2 .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-2gq8yc9-2b2c47a66841debbf790d9018853a9f2 .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  class='av-special-heading av-2gq8yc9-2b2c47a66841debbf790d9018853a9f2 av-special-heading-h2 blockquote modern-quote  avia-builder-el-7  el_after_av_textblock  el_before_av_hr'><h2 class='av-special-heading-tag'  itemprop=\"headline\"  >Key information about information security management systems<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-28u0m55-b426334e916534903f0c8ee0a7ad7843\">\n#top .hr.hr-invisible.av-28u0m55-b426334e916534903f0c8ee0a7ad7843{\nheight:30px;\n}\n<\/style>\n<div  class='hr av-28u0m55-b426334e916534903f0c8ee0a7ad7843 hr-invisible  avia-builder-el-8  el_after_av_heading  el_before_av_textblock'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n<section  class='av_textblock_section av-1nskyc9-c900fda0590cece54a0310297a83b14c'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><ul>\n<li style=\"font-size: 20px;\" class=\"translation-block\">The information security management system is also known as an <strong>\"ISMS\"<\/strong><\/li>\n<li style=\"font-size: 20px;\">When implementing an ISMS, the <strong>Information Security Officer <\/strong>plays an important role<\/li>\n<li style=\"font-size: 20px;\" class=\"translation-block\">An ISMS is oriented towards <strong>standards and norms<\/strong> such as ISO 2700x family and specifications of the BSI<\/li>\n<li style=\"font-size: 20px;\" class=\"translation-block\">The control of an ISMS is a continuous task and corresponds to a mangement process that is based on the <strong>PDCA cycle<\/strong>.<\/li>\n<\/ul>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-12plkd5-e62996de54ebbdf2b63aea4ce9e8c2f6\">\n#top .hr.hr-invisible.av-12plkd5-e62996de54ebbdf2b63aea4ce9e8c2f6{\nheight:30px;\n}\n<\/style>\n<div  class='hr av-12plkd5-e62996de54ebbdf2b63aea4ce9e8c2f6 hr-invisible  avia-builder-el-10  el_after_av_textblock  avia-builder-el-last'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><\/p><\/div>\n<div class='flex_column_table av-lw9umk-33703d3362028b1aa2ff3515470fd277 sc-av_one_full av-equal-height-column-flextable'>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-lw9umk-33703d3362028b1aa2ff3515470fd277\">\n.flex_column.av-lw9umk-33703d3362028b1aa2ff3515470fd277{\nborder-radius:0px 0px 0px 0px;\npadding:25px 25px 25px 25px;\nbackground-color:#f7f7f7;\n}\n<\/style>\n<div  id=\"uebersicht\"  class='flex_column av-lw9umk-33703d3362028b1aa2ff3515470fd277 av_one_full  avia-builder-el-11  el_after_av_one_full  el_before_av_one_full  first flex_column_table_cell av-equal-height-column av-align-top  column-top-margin'     ><section  class='av_textblock_section av-kiipug5e-a69566d46b299f3be16162a702095af7'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h2>Content on the topic of information security:<\/h2>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-kiiw1urp-b69fc6361795cda8f311be7c5a2c3872\">\n#top .avia-icon-list-container.av-kiiw1urp-b69fc6361795cda8f311be7c5a2c3872 .iconlist_icon{\ncolor:#127db3;\nfont-size:20px;\n}\n#top .avia-icon-list-container.av-kiiw1urp-b69fc6361795cda8f311be7c5a2c3872 .iconlist_icon svg:first-child{\nstroke:#127db3;\nfill:#127db3;\nheight:20px;\nwidth:20px;\n}\n#top #wrap_all .avia-icon-list-container.av-kiiw1urp-b69fc6361795cda8f311be7c5a2c3872 .av_iconlist_title{\nfont-size:20px;\n}\n<\/style>\n<div  class='avia-icon-list-container av-kiiw1urp-b69fc6361795cda8f311be7c5a2c3872  avia-builder-el-13  el_after_av_textblock  el_before_av_hr'><ul class='avia-icon-list avia_animate_when_almost_visible avia-icon-list-left av-iconlist-small av-kiiw1urp-b69fc6361795cda8f311be7c5a2c3872 avia-iconlist-animate'>\n<li><div class='iconlist_icon av-kv9nenus-dbf69652a23c7c02dbf88ec34061e4b0 avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry av-iconlist-empty\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#whitepaper&#039; title=&#039;Whitepaper Managing the compliance field of information security digitally&#039;&gt;Whitepaper Managing the compliance field of information security digitally&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#whitepaper' title='Whitepaper Managing the compliance field of information security digitally'>Whitepaper Managing the compliance field of information security digitally<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-1m936j-166dad37069a98fadf352e635e58caa8 avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#isms&#039; title=&#039;The Information Security Management System&#039;&gt;The Information Security Management System&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#isms' title='The Information Security Management System'>The Information Security Management System<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><ul>\n<li><a href=\"#unterschied-isms-dsms\">The difference between ISMS and DSMS<\/a><\/li>\n<li><a href=\"#datenschutz-informationssicherheit\">The connection between data protection and information security<\/a><\/li>\n<\/ul>\n<\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-cqanyz-b03f4647ab5c9994acbace5a976e28e9 avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry av-iconlist-empty\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#informationssicherheitskonzept&#039; title=&#039;The advantages of an information security management system&#039;&gt;The advantages of an information security management system&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#informationssicherheitskonzept' title='The advantages of an information security management system'>The advantages of an information security management system<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-cqanyz-5-6e16c7f3cc16e727423cef6ec56a1e92 avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry av-iconlist-empty\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#informationssicherheitsbeauftragerolle&#039; title=&#039;The role of the information security officer in the ISMS&#039;&gt;The role of the information security officer in the ISMS&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#informationssicherheitsbeauftragerolle' title='The role of the information security officer in the ISMS'>The role of the information security officer in the ISMS<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-kv87kgc8-6414dd123907df7e53df7d4406df7ec3 avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#isms-aufbauen-und-steuern&#039; title=&#039;Establish and control information security management system (ISMS) &#039;&gt;Establish and control information security management system (ISMS) &lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#isms-aufbauen-und-steuern' title='Establish and control information security management system (ISMS) '>Establish and control information security management system (ISMS) <\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><ul>\n<li><a href=\"#isms-pdca\"><span class=\"TextRun SCXW35355440 BCX0\" lang=\"DE-DE\" xml:lang=\"DE-DE\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW35355440 BCX0\">Implement ISMS tools using the PDCA cycle<\/span><\/span><\/a><\/li>\n<li><a href=\"#umsetzung-isms\">The implementation of an ISMS<\/a><\/li>\n<\/ul>\n<\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-kv9nenus-1-2f44d99b948417e28301ddfac47eacdd avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#normen-und-standards&#039; title=&#039;Norms and standards&#039;&gt;Norms and standards&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#normen-und-standards' title='Norms and standards'>Norms and standards<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><ul>\n<li><a href=\"#normen-und-standards\">ISO 27001<\/a><\/li>\n<li><a href=\"#iso-27005\">ISO 27005<\/a><\/li>\n<li><a href=\"#it-grundschutz-bsi\">BSI Basic IT Protection Compendium<\/a><\/li>\n<li><a href=\"#b3s\">Industry-specific safety standards (B3S)<\/a><\/li>\n<\/ul>\n<\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-kv9nenus-1-6-36079cf3a4a7e5dff4c321489069c8fd avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry av-iconlist-empty\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#isms-software&#039; title=&#039;ISMS software&#039;&gt;ISMS software&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#isms-software' title='ISMS software'>ISMS software<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-kv9nenus-1-6-1-dbd54d64053cfdb69497070929713e8b avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry av-iconlist-empty\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#video&#039; title=&#039;Video on the implementation of an information security management system&#039;&gt;Video on the implementation of an information security management system&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#video' title='Video on the implementation of an information security management system'>Video on the implementation of an information security management system<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-kv9nenus-1-6-1-1-b0d3748b55f56713bdab804da3f76921 avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry av-iconlist-empty\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#fazit&#039; title=&#039;Conclusion&#039;&gt;Conclusion&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#fazit' title='Conclusion'>Conclusion<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<\/ul><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-kdu4eeyn-eb3f32c0008bb0ef46b2ec5ca7bda5fa\">\n#top .hr.hr-invisible.av-kdu4eeyn-eb3f32c0008bb0ef46b2ec5ca7bda5fa{\nheight:30px;\n}\n<\/style>\n<div  class='hr av-kdu4eeyn-eb3f32c0008bb0ef46b2ec5ca7bda5fa hr-invisible  avia-builder-el-14  el_after_av_iconlist  avia-builder-el-last'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><\/p><\/div><\/div><!--close column table wrapper. Autoclose: 1 -->\n<div  id=\"whitepaper\"  class='flex_column av-l95oqqgq-e10cb1bdf92376715457dd02153c5ade av_one_full  avia-builder-el-15  el_after_av_one_full  el_before_av_one_full  first flex_column_div  column-top-margin'     ><p>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-l95oq2zj-ff3e9f68c93136a9f281e05d126dcd08\">\n#top .av-special-heading.av-l95oq2zj-ff3e9f68c93136a9f281e05d126dcd08{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-l95oq2zj-ff3e9f68c93136a9f281e05d126dcd08 .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-l95oq2zj-ff3e9f68c93136a9f281e05d126dcd08 .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  class='av-special-heading av-l95oq2zj-ff3e9f68c93136a9f281e05d126dcd08 av-special-heading-h2  avia-builder-el-16  el_before_av_image  avia-builder-el-first'><h2 class='av-special-heading-tag'  itemprop=\"headline\"  >Whitepaper Managing the compliance field of information security digitally<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-l95opuyy-c576666540c48df0440bb2bdeba881d7\">\n.avia-image-container.av-l95opuyy-c576666540c48df0440bb2bdeba881d7 img.avia_image{\nbox-shadow:none;\n}\n.avia-image-container.av-l95opuyy-c576666540c48df0440bb2bdeba881d7 .av-image-caption-overlay-center{\ncolor:#ffffff;\n}\n<\/style>\n<div  class='avia-image-container av-l95opuyy-c576666540c48df0440bb2bdeba881d7 av-styling- av-img-linked avia-align-left  avia-builder-el-17  el_after_av_heading  el_before_av_hr  tp_de2'   itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\" ><div class=\"avia-image-container-inner\"><div class=\"avia-image-overlay-wrap\"><a href=\"#formular\" class='avia_image'  aria-label='Cover whitepaper ISMS'><img decoding=\"async\" class='wp-image-16557 avia-img-lazy-loading-not-16557 avia_image' src=\"https:\/\/media.robin-data.io\/2021\/10\/16083331\/Cover-Whitepaper-ISMS-1030x462.png\" alt='Whitepaper Information Security Management System' title='Cover whitepaper ISMS'  height=\"462\" width=\"1030\"  itemprop=\"thumbnailUrl\" srcset=\"https:\/\/media.robin-data.io\/2021\/10\/16083331\/Cover-Whitepaper-ISMS-1030x462.png 1030w, https:\/\/media.robin-data.io\/2021\/10\/16083331\/Cover-Whitepaper-ISMS-300x135.png 300w, https:\/\/media.robin-data.io\/2021\/10\/16083331\/Cover-Whitepaper-ISMS-768x345.png 768w, https:\/\/media.robin-data.io\/2021\/10\/16083331\/Cover-Whitepaper-ISMS-18x8.png 18w, https:\/\/media.robin-data.io\/2021\/10\/16083331\/Cover-Whitepaper-ISMS-705x316.png 705w, https:\/\/media.robin-data.io\/2021\/10\/16083331\/Cover-Whitepaper-ISMS.png 1172w\" sizes=\"(max-width: 1030px) 100vw, 1030px\" \/><\/a><\/div><\/div><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-l95opeh9-a6ff87f260c8f8536d8a13d1a37b267c\">\n#top .hr.hr-invisible.av-l95opeh9-a6ff87f260c8f8536d8a13d1a37b267c{\nheight:15px;\n}\n<\/style>\n<div  class='hr av-l95opeh9-a6ff87f260c8f8536d8a13d1a37b267c hr-invisible  avia-builder-el-18  el_after_av_image  el_before_av_textblock'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n<section  class='av_textblock_section av-l95opowk-d0806e1994525d100ad7d05438cef1fa'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p style=\"font-size: 20px; color: #00b3bd;\">In the white paper Managing the compliance field of information security digitally you will find:<\/p>\n<ul>\n<li>Information on the\u00a0<strong>Compliance management<\/strong> and to the <strong>Information Security<\/strong><\/li>\n<li>Responsibilities and interfaces for <strong>Information security in the organisation<\/strong><\/li>\n<li><strong>Norms and standards\u00a0<\/strong> for information security<\/li>\n<li>You will find an <strong>step-by-step explanation<\/strong> for the implementation of an information security management system<\/li>\n<\/ul>\n<\/div><\/section><br \/>\n<br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-opfq0t-41230c8592321b9513a7bc4eb1309713\">\n.avia_message_box.av-opfq0t-41230c8592321b9513a7bc4eb1309713{\nbackground-color:rgba(244,150,0,0.3);\ncolor:#303440;\n}\n.avia_message_box.av-opfq0t-41230c8592321b9513a7bc4eb1309713 .avia_message_box_icon.avia-svg-icon svg:first-child{\nfill:#303440;\nstroke:#303440;\n}\n<\/style>\n<div id='avia-messagebox-' class='avia_message_box av_notification av-opfq0t-41230c8592321b9513a7bc4eb1309713 avia-color-custom avia-size-large avia-icon_select-no avia-border-  avia-builder-el-21  el_after_av_codeblock  avia-builder-el-last  tp_en2' ><div class=\"avia_message_box_content\"><p>Unfortunately this content is currently only available in German. Please feel free to <a href=\"https:\/\/www.robin-data.io\/en\/contact#formular\">contact us<\/a> for more information.<\/p>\n<\/div><\/div><\/p><\/div>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-s8o1a1-5bd2db68a3237686804c2429ae02512d\">\n.flex_column.av-s8o1a1-5bd2db68a3237686804c2429ae02512d{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div  class='flex_column av-s8o1a1-5bd2db68a3237686804c2429ae02512d av_one_full  avia-builder-el-22  el_after_av_one_full  el_before_av_hr  first flex_column_div av-zero-column-padding  column-top-margin'     ><section  id=\"isms\"  class='av_textblock_section av-kqw5ejvf-dce2a376e8feaab89ef9092500bc9a76'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h2>The Information Security Management System<\/h2>\n<p>The information security management system is the responsibility of the company's management. The implementation of IT security measures includes the definition and rollout of security policies by the management. The management is supported in the development by information security officers, IT security officers and data protection officers. The standards defined in the ISMS must be implemented and adhered to in all areas of the organisation.<\/p>\n<p>Often, the data protection management system and the information security management system are set up at the same time, as there are overlaps in content between the two management systems. A modern approach to implementing an ISMS is by means of Software-as-a-Service (SaaS) solutions, which actively support the information security officer in coordinating and controlling activities.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-1k4y17h-b646b0849950e4da830688779a129f54\">\n#top .hr.hr-invisible.av-1k4y17h-b646b0849950e4da830688779a129f54{\nheight:15px;\n}\n<\/style>\n<div  class='hr av-1k4y17h-b646b0849950e4da830688779a129f54 hr-invisible  avia-builder-el-24  el_after_av_textblock  el_before_av_textblock'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n<section  id=\"unterschied-isms-dsms\"  class='av_textblock_section av-kv874t4o-699f6420a45c504ed2e2f4655607cbd0'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h3>The difference between ISMS and DSMS<\/h3>\n<p>Data protection and information security belong together, but they differ in one essential point: information security, in comparison to data protection, does not focus on personal data. Thus, an ISMS cannot replace a DSMS or vice versa. Ideally, DSMS and ISMS are based on each other and complement each other in accordance with the principles set out in the following sections. <a href=\"https:\/\/help.robin-data.io\/artikel-35-dsgvo\">Art. 35<\/a> and the <a href=\"https:\/\/help.robin-data.io\/artikel-32-dsgvo\">32<\/a> DSGVO described data protection requirements.<\/p>\n<p>An ISMS is not sufficient to meet the data protection requirements, so no legal aspects are clarified, but mainly technical aspects. In addition, compliance with data protection requirements for the secure processing of personal data cannot be implemented by an ISMS alone, as all data is treated in the same way.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-1a2f6yl-92536a9f8b28c7ad60bf61a6b8877322\">\n#top .hr.hr-invisible.av-1a2f6yl-92536a9f8b28c7ad60bf61a6b8877322{\nheight:15px;\n}\n<\/style>\n<div  class='hr av-1a2f6yl-92536a9f8b28c7ad60bf61a6b8877322 hr-invisible  avia-builder-el-26  el_after_av_textblock  el_before_av_textblock'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n<section  id=\"datenschutz-informationssicherheit\"  class='av_textblock_section av-kvjidslv-9bd8a4a8f5853b6b488c1da963252e71'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h3>The link between data protection and information security<\/h3>\n<p>Data protection pursues the goal of protecting personal data from misuse and guaranteeing the right to informational self-determination on the part of those affected. In contrast, information security aims to guarantee the security of data in company systems by means of suitable technical and organisational measures and to ensure the confidentiality, availability and integrity of data. Whether data have a personal reference or not is not important in information security, as all data to be protected are treated equally. In practice, there is often an overlap between data protection and information security.<\/p>\n<\/div><\/section><\/p><\/div>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-nfcr2x-29ae555ba1d91a49efd090e1aacdac77\">\n#top .hr.hr-invisible.av-nfcr2x-29ae555ba1d91a49efd090e1aacdac77{\nheight:15px;\n}\n<\/style>\n<div  class='hr av-nfcr2x-29ae555ba1d91a49efd090e1aacdac77 hr-invisible  avia-builder-el-28  el_after_av_one_full  el_before_av_one_full'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-2kr80v1-6a2bcce0fcfc562a6d40437fd59117ae\">\n.flex_column.av-2kr80v1-6a2bcce0fcfc562a6d40437fd59117ae{\npadding:35px 25px 30px 25px;\nbackground-color:#01064a;\nbackground:linear-gradient( to top right, #01064a, #00b3bd );\n}\n<\/style>\n<div  class='flex_column av-2kr80v1-6a2bcce0fcfc562a6d40437fd59117ae av_one_full  avia-builder-el-29  el_after_av_hr  el_before_av_one_full  first flex_column_div'     ><p>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-lnwvmh06-9b9742b74d1316bac178fe26e9f0c223\">\n.iconbox.av-lnwvmh06-9b9742b74d1316bac178fe26e9f0c223 .iconbox_icon{\ncolor:#ffffff;\n}\n.iconbox.av-lnwvmh06-9b9742b74d1316bac178fe26e9f0c223 .iconbox_icon.avia-svg-icon svg:first-child{\nfill:#ffffff;\nstroke:#ffffff;\n}\n#top #wrap_all .iconbox.av-lnwvmh06-9b9742b74d1316bac178fe26e9f0c223 .iconbox_content_title{\ncolor:#ffffff;\n}\n.iconbox.av-lnwvmh06-9b9742b74d1316bac178fe26e9f0c223 .iconbox_content_container{\ncolor:#ffffff;\n}\n<\/style>\n<article  class='iconbox iconbox_left_content av-lnwvmh06-9b9742b74d1316bac178fe26e9f0c223 av-icon-style-no-border  avia-builder-el-30  el_before_av_textblock  avia-builder-el-first'  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='iconbox_icon heading-color avia-iconfont avia-font-complianceos' data-av_icon='\ue901' data-av_iconfont='complianceos'  ><\/div><div class=\"iconbox_content\"><header class=\"entry-content-header\" aria-label=\"Icon: Order the experts from Robin Data as ISB\"><h3 class='iconbox_content_title'  itemprop=\"headline\" >Order the experts of Robin Data as ISB<\/h3><\/header><div class='iconbox_content_container av_inherit_color'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><br \/>\n<section  class='av_textblock_section av-lnwvoksf-bcbba84fcf9a42c256b250c86e34b9a0'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p><span style=\"color: #ffffff;\">Designation of our external information security officers: vulnerability audit, definition and implementation of action plan, determination of protection needs. Reduce your liability risks!<\/span><\/p>\n<\/div><\/section><br \/>\n<div  class='avia-button-wrap av-lnwvp4us-a6370a86bc1b210881ea27a10610df67-wrap avia-button-left  avia-builder-el-32  el_after_av_textblock  avia-builder-el-last'>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-lnwvp4us-a6370a86bc1b210881ea27a10610df67\">\n#top #wrap_all .avia-button.av-lnwvp4us-a6370a86bc1b210881ea27a10610df67{\nbackground-color:#00b3bd;\nborder-color:#00b3bd;\ncolor:#ffffff;\nborder-radius:1px 1px 1px 1px;\ntransition:all 0.4s ease-in-out;\n}\n#top #wrap_all .avia-button.av-lnwvp4us-a6370a86bc1b210881ea27a10610df67:hover{\nbackground-color:white;\ncolor:#00b3bd;\ntransition:all 0.4s ease-in-out;\n}\n#top #wrap_all.avia-button.av-lnwvp4us-a6370a86bc1b210881ea27a10610df67:hover .avia_button_background{\nborder-radius:1px 1px 1px 1px;\n}\n#top #wrap_all .avia-button.av-lnwvp4us-a6370a86bc1b210881ea27a10610df67 .avia-svg-icon svg:first-child{\nfill:#ffffff;\nstroke:#ffffff;\n}\n#top #wrap_all .avia-button.av-lnwvp4us-a6370a86bc1b210881ea27a10610df67:hover .avia-svg-icon svg:first-child{\nfill:#00b3bd;\nstroke:#00b3bd;\n}\n<\/style>\n<a href='https:\/\/www.robin-data.io\/en\/information-security-officer'  class='avia-button av-lnwvp4us-a6370a86bc1b210881ea27a10610df67 av-link-btn avia-icon_select-no avia-size-large avia-position-left'   aria-label=\"Learn more\"><span class='avia_iconbox_title' >Learn more<\/span><\/a><\/div><\/p><\/div>\n<div  id=\"informationssicherheitskonzept\"  class='flex_column av-20l01p-203b515b26a4064466f8da3ba1d29021 av_one_full  avia-builder-el-33  el_after_av_one_full  el_before_av_one_full  first flex_column_div  column-top-margin'     ><section  id=\"vorteile\"  class='av_textblock_section av-kvjjizq9-1fa98532e3d8999127089ce7796f6f4e'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h2>The advantages of an information security management system<\/h2>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-s8wmn1-32954664fba4f1bdf9489517fe031b4f\">\n#top .hr.hr-invisible.av-s8wmn1-32954664fba4f1bdf9489517fe031b4f{\nheight:25px;\n}\n<\/style>\n<div  id=\"informationssicherheitsbeauftragerolle\"  class='hr av-s8wmn1-32954664fba4f1bdf9489517fe031b4f hr-invisible  avia-builder-el-35  el_after_av_textblock  el_before_av_textblock'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n<section  id=\"isms\"  class='av_textblock_section av-kx8t9bsm-0cdfb4932433341856f0f8ff4b7e1d88'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h3>Increasing information security<\/h3>\n<p>An information security management system ensures that information of the company, of customers or of third parties is adequately protected. This involves protecting data from loss through technical errors as well as theft.<\/p>\n<h3>Maintaining the capacity to act<\/h3>\n<p>An essential component of an ISMS is the consideration of corporate processes and business continuity management. Every information security management system contains a contingency plan, which provides concrete schedules and measures for specific information security risks and security incidents. By creating a contingency plan, damage can be minimised and operations can be resumed as quickly as possible after an incident.<\/p>\n<h3>Competitive advantages through cost reduction<\/h3>\n<p>The structured implementation of an ISMS improves the profitability of your organisation and reduces costs in the long term. By planning measures, those responsible can set priorities according to the likelihood of certain risks occurring. As a result, resources are used more efficiently and investments are made in a coordinated manner at important points. Furthermore, an information security management system is adaptable to the size and structure of organisations. The use of an ISMS is profitable for companies and authorities as well as for SMEs. Auditing according to ISO 2700x standards also has positive effects on the external image and ensures trust among customers and business partners.<\/p>\n<h3>Fewer security incidents due to informed employees<\/h3>\n<p>Through the introduction of an ISMS, employees are actively informed about the topic of information security. The processes to be defined require joint design and cooperation between management and employees. In this way, employees develop a sensitivity for information security issues.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-mqtpod-650332c77acfd8f6dc58e4d665e472ab\">\n#top .hr.hr-invisible.av-mqtpod-650332c77acfd8f6dc58e4d665e472ab{\nheight:15px;\n}\n<\/style>\n<div  id=\"informationssicherheitsbeauftragerolle\"  class='hr av-mqtpod-650332c77acfd8f6dc58e4d665e472ab hr-invisible  avia-builder-el-37  el_after_av_textblock  el_before_av_textblock'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n<section  id=\"informationssicherheitsbeauftragte-im-isms\"  class='av_textblock_section av-kv9no0iw-90ab29742d5a80aa306c89b1398ee1ee'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h2>The role of the information security officer in the ISMS<\/h2>\n<p>The appointment of an information security officer is essential when implementing an ISMS. This officer is integrated into all ISMS processes and is the point of contact for all questions regarding information security. The information security officer works closely with the IT managers. He is the first point of contact for all questions regarding information security. The information security officer is appointed by the management and reports directly to it.<\/p>\n<\/div><\/section><\/p><\/div>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-s9ohq5-9cb2301d6b74ab206de521e6dc064b2d\">\n.flex_column.av-s9ohq5-9cb2301d6b74ab206de521e6dc064b2d{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div  class='flex_column av-s9ohq5-9cb2301d6b74ab206de521e6dc064b2d av_one_full  avia-builder-el-39  el_after_av_one_full  el_before_av_one_full  first flex_column_div av-zero-column-padding  column-top-margin'     ><section  id=\"isms-aufbauen-und-steuern\"  class='av_textblock_section av-kv87fgni-1122d63c4e6baf4c39607a1afcd25c01'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h2>Establish and control information security management system (ISMS)<\/h2>\n<p>Standards such as the ISO 2700 family and the BSI's IT-Grundschutz help to design an ISMS and pay attention to all necessary security measures. The aim is to identify potential threats at an early stage and to avoid or minimise damage with suitable countermeasures. Since threats change over time, the standards view information security as a continuously adaptable process. This is accordingly dependent on certain factors such as - changes in the processes within a company, changed legal framework conditions, new threats, but also new technologies.  In order to continuously improve the ISMS, the application of the PDCA cycle is recommended.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-1znchh9-dfafa3d2a877989d2c4bb9806d011bd8\">\n#top .hr.hr-invisible.av-1znchh9-dfafa3d2a877989d2c4bb9806d011bd8{\nheight:15px;\n}\n<\/style>\n<div  class='hr av-1znchh9-dfafa3d2a877989d2c4bb9806d011bd8 hr-invisible  avia-builder-el-41  el_after_av_textblock  el_before_av_textblock'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n<section  id=\"isms-pdca\"  class='av_textblock_section av-kv87h36v-546c6ecc4e93d5a4f8fa5169e6d3e077'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h3><span class=\"TextRun SCXW35355440 BCX0\" lang=\"DE-DE\" xml:lang=\"DE-DE\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW35355440 BCX0\">Implement ISMS tools using the PDCA cycle<\/span><\/span><span class=\"EOP SCXW35355440 BCX0\" data-ccp-props=\"{\">\u00a0<\/span><\/h3>\n<p>The PDCA cycle is part of the ISO 27001 standard and consists of four phases that help to continuously improve the ISMS.\u00a0<span data-ccp-props=\"{\"> I<\/span><span data-contrast=\"auto\">he Act phase is followed by the Plan phase. All phases are run through one after the other and the whole cycle repeats itself continuously. <\/span><span data-ccp-props=\"{\">\u00a0<\/span><\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-kvjll7v8-9a205ee69290a717aa43fd9bc4935851\">\n.avia-timeline-container.av-kvjll7v8-9a205ee69290a717aa43fd9bc4935851 .av-milestone-icon-inner{\nbackground-color:#ffffff;\ncolor:#00b3bd;\n}\n.avia-timeline-container.av-kvjll7v8-9a205ee69290a717aa43fd9bc4935851 .av-milestone-indicator{\nbackground-color:#ffffff;\n}\n.avia-timeline-container.av-kvjll7v8-9a205ee69290a717aa43fd9bc4935851 .av-milestone-article-footer{\nbackground-color:#ffffff;\n}\n.avia-timeline-container.av-kvjll7v8-9a205ee69290a717aa43fd9bc4935851 i.milestone-char.avia-svg-icon svg:first-child{\nfill:#00b3bd;\nstroke:#00b3bd;\n}\n<\/style>\n<div  id=\"avia-timeline-1\"  class='avia-timeline-container av-kvjll7v8-9a205ee69290a717aa43fd9bc4935851 av-slideshow-ui  avia-builder-el-43  el_after_av_textblock  el_before_av_hr' ><ul class='avia-timeline avia-timeline-vertical av-milestone-placement-left avia-timeline-boxshadow avia_animate_when_almost_visible avia-timeline-animate'>\n<li  class='av-milestone av-kvjlitcs-c8e8d2242c57b37043a430f9606129b1 av-animated-generic fade-in av-milestone-valign-baseline av-milestone-odd'><h2 class='av-milestone-date' id='milestone-p' ><strong>P<span class='av-milestone-indicator'><\/span><\/strong><\/h2><div class=\"av-milestone-icon-wrap\"><span class='av-milestone-icon milestone_icon avia-font-fontello'><span class='av-milestone-icon-inner milestone_inner'><i class='milestone-char avia-iconfont avia-font-fontello' data-av_icon='\uf14e' data-av_iconfont='fontello' ><\/i><\/span><\/span><\/div><article class='av-milestone-content-wrap'><div class='av-milestone-contentbox'><header class=\"entry-content-header\" aria-label=\"Milestone: Plan: Planning\"><h4 class='av-milestone-title'>Plan: Planning<\/h4><\/header><div class='av-milestone-content'><p>In this part of the cycle, the security policy, objectives, processes and procedures relevant to risk management and information security improvement are defined.<\/p>\n<\/div><\/div><footer class='av-milestone-article-footer entry-footer'><\/footer><\/article><\/li>\n<li  class='av-milestone av-kvjlitcs-4-5a61e116098697cac78efa8178892210 av-animated-generic fade-in av-milestone-valign-baseline av-milestone-even'><h2 class='av-milestone-date' id='milestone-d' ><strong>D<span class='av-milestone-indicator'><\/span><\/strong><\/h2><div class=\"av-milestone-icon-wrap\"><span class='av-milestone-icon milestone_icon avia-font-entypo-fontello'><span class='av-milestone-icon-inner milestone_inner'><i class='milestone-char avia-iconfont avia-font-entypo-fontello' data-av_icon='\ue8dd' data-av_iconfont='entypo-fontello' ><\/i><\/span><\/span><\/div><article class='av-milestone-content-wrap'><div class='av-milestone-contentbox'><header class=\"entry-content-header\" aria-label=\"Milestone: D: Realisation\"><h4 class='av-milestone-title'>D: Implementation<\/h4><\/header><div class='av-milestone-content'><p>Following the plan phase, the measures decided upon in the plan phase are implemented.<\/p>\n<\/div><\/div><footer class='av-milestone-article-footer entry-footer'><\/footer><\/article><\/li>\n<li  class='av-milestone av-kvjlitcs-3-8a91d48427dbd1ce083bf968c500e7ef av-animated-generic fade-in av-milestone-valign-baseline av-milestone-odd'><h2 class='av-milestone-date' id='milestone-c' ><strong>C<span class='av-milestone-indicator'><\/span><\/strong><\/h2><div class=\"av-milestone-icon-wrap\"><span class='av-milestone-icon milestone_icon avia-font-entypo-fontello'><span class='av-milestone-icon-inner milestone_inner'><i class='milestone-char avia-iconfont avia-font-entypo-fontello' data-av_icon='\ue803' data-av_iconfont='entypo-fontello' ><\/i><\/span><\/span><\/div><article class='av-milestone-content-wrap'><div class='av-milestone-contentbox'><header class=\"entry-content-header\" aria-label=\"Milestone: Check: Review\"><h4 class='av-milestone-title'>Check: Review<\/h4><\/header><div class='av-milestone-content'><p>The measures are assessed in this phase for their effectiveness, appropriateness and the quality of the process performance.<\/p>\n<\/div><\/div><footer class='av-milestone-article-footer entry-footer'><\/footer><\/article><\/li>\n<li  class='av-milestone av-kvjlitcs-2-f85cd2defa846ab52cc1b7fe12e1d71c av-animated-generic fade-in av-milestone-valign-baseline av-milestone-even'><h2 class='av-milestone-date' id='milestone-a' ><strong>A<span class='av-milestone-indicator'><\/span><\/strong><\/h2><div class=\"av-milestone-icon-wrap\"><span class='av-milestone-icon milestone_icon avia-font-entypo-fontello'><span class='av-milestone-icon-inner milestone_inner'><i class='milestone-char avia-iconfont avia-font-entypo-fontello' data-av_icon='\ue855' data-av_iconfont='entypo-fontello' ><\/i><\/span><\/span><\/div><article class='av-milestone-content-wrap'><div class='av-milestone-contentbox'><header class=\"entry-content-header\" aria-label=\"Milestone: Act: Act\"><h4 class='av-milestone-title'>Act: Acting<\/h4><\/header><div class='av-milestone-content'><p>Functioning, effective processes can now be established as the standard, while those processes that were ineffective need to be reacted to.<\/p>\n<\/div><\/div><footer class='av-milestone-article-footer entry-footer'><\/footer><\/article><\/li>\n<\/ul><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-1otskd9-dd3e8d45e903d6b48019f141a3f1bd5a\">\n#top .hr.hr-invisible.av-1otskd9-dd3e8d45e903d6b48019f141a3f1bd5a{\nheight:15px;\n}\n<\/style>\n<div  class='hr av-1otskd9-dd3e8d45e903d6b48019f141a3f1bd5a hr-invisible  avia-builder-el-44  el_after_av_timeline  el_before_av_textblock'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n<section  id=\"umsetzung-isms\"  class='av_textblock_section av-kvi37fmo-ae6c9691a6c1bde0bd4f410af8b7249c'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h3>The implementation of an ISMS<\/h3>\n<p>When implementing an ISMS, planning, implementation and maintenance are divided into individual process steps. An information security manual is recommended to document all guidelines and measures. The implementation of an information security management system is a complex process and can be carried out by means of the following steps:<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-kvjn9wer-c32ddfc9e70e3d7268e5a01db5a0aaab\">\n#top .togglecontainer.av-kvjn9wer-c32ddfc9e70e3d7268e5a01db5a0aaab p.toggler{\ncolor:#303440;\nbackground-color:#f7f7f7;\nborder-color:#ffffff;\n}\n#top .togglecontainer.av-kvjn9wer-c32ddfc9e70e3d7268e5a01db5a0aaab p.toggler.activeTitle{\ncolor:#ffffff;\nborder-color:#ffffff;\nbackground-color:#127db3;\n}\n#top .togglecontainer.av-kvjn9wer-c32ddfc9e70e3d7268e5a01db5a0aaab p.toggler:not(.activeTitle):hover{\ncolor:#ffffff;\nbackground-color:#127db3;\n}\n#top .togglecontainer.av-kvjn9wer-c32ddfc9e70e3d7268e5a01db5a0aaab p.toggler:not(.activeTitle):hover .toggle_icon, #top .togglecontainer.av-kvjn9wer-c32ddfc9e70e3d7268e5a01db5a0aaab p.toggler:not(.activeTitle):hover .toggle_icon *{\nborder-color:#ffffff !important;\n}\n#top .togglecontainer.av-kvjn9wer-c32ddfc9e70e3d7268e5a01db5a0aaab p.toggler .toggle_icon{\ncolor:#303440;\nborder-color:#303440;\n}\n#top .togglecontainer.av-kvjn9wer-c32ddfc9e70e3d7268e5a01db5a0aaab p.toggler.activeTitle .toggle_icon, #top .togglecontainer.av-kvjn9wer-c32ddfc9e70e3d7268e5a01db5a0aaab p.toggler.activeTitle .toggle_icon > span{\ncolor:#ffffff;\nborder-color:#ffffff;\n}\n#top .togglecontainer.av-kvjn9wer-c32ddfc9e70e3d7268e5a01db5a0aaab .toggle_wrap .toggle_content{\ncolor:#303440;\nbackground-color:#f7f7f7;\nborder-color:#ffffff;\n}\n<\/style>\n<div  class='togglecontainer av-kvjn9wer-c32ddfc9e70e3d7268e5a01db5a0aaab av-elegant-toggle  avia-builder-el-46  el_after_av_textblock  avia-builder-el-last  toggle_close_all hasCurrentStyle'  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/FAQPage\" >\n<section class='av_toggle_section av-kvjmay3k-a65858b552e30881cffca1cbe714eb44'  itemscope=\"itemscope\" itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\" ><div role=\"tablist\" class=\"single_toggle\" data-tags=\"{All} \"  ><p id='toggle-toggle-id-1' data-fake-id='#toggle-id-1' class='toggler  activeTitle av-title-above av-inherit-font-color hasCustomColor av-inherit-border-color'  itemprop=\"name\"  role='tab' tabindex='0' aria-controls='toggle-id-1' data-slide-speed=\"200\" data-title=\"Definition der Schutzbereiche\" data-title-open=\"\" data-aria_collapsed=\"Click to expand: Definition der Schutzbereiche\" data-aria_expanded=\"Click to collapse: Definition der Schutzbereiche\">Definition of the areas of protection<span class=\"toggle_icon\"><span class=\"vert_icon\"><\/span><span class=\"hor_icon\"><\/span><\/span><\/p><div id='toggle-id-1' aria-labelledby='toggle-toggle-id-1' role='region' class='toggle_wrap  active_tc av-title-above' style='display:block;'  itemscope=\"itemscope\" itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" ><div class='toggle_content invers-color av-inherit-font-color hasCustomColor av-inherit-border-color'  itemprop=\"text\" ><p>The first step was to determine what the ISMS should do, which values and information should be protected and which areas of protection your ISMS should cover. This includes identifying the areas of application, boundaries and interfaces. Analyse the processes of your organisation and also consider access by employees, customers or third parties.<\/p>\n<\/div><\/div><\/div><\/section>\n<section class='av_toggle_section av-kvjmbqxn-cab38f116be53d83f2aae7443c4d6560'  itemscope=\"itemscope\" itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\" ><div role=\"tablist\" class=\"single_toggle\" data-tags=\"{All} \"  ><p id='toggle-toggle-id-2' data-fake-id='#toggle-id-2' class='toggler  av-title-above av-inherit-font-color hasCustomColor av-inherit-border-color'  itemprop=\"name\"  role='tab' tabindex='0' aria-controls='toggle-id-2' data-slide-speed=\"200\" data-title=\"Durchf\u00fchrung der Risikoanalyse\" data-title-open=\"\" data-aria_collapsed=\"Click to expand: Durchf\u00fchrung der Risikoanalyse\" data-aria_expanded=\"Click to collapse: Durchf\u00fchrung der Risikoanalyse\">Carrying out the risk analysis<span class=\"toggle_icon\"><span class=\"vert_icon\"><\/span><span class=\"hor_icon\"><\/span><\/span><\/p><div id='toggle-id-2' aria-labelledby='toggle-toggle-id-2' role='region' class='toggle_wrap  av-title-above'   itemscope=\"itemscope\" itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" ><div class='toggle_content invers-color av-inherit-font-color hasCustomColor av-inherit-border-color'  itemprop=\"text\" ><p>In the second step, a risk analysis must be carried out for each asset worth protecting, in which the risks within the scope of application are identified and assessed. The assessment is carried out by means of legal requirements or compliance guidelines. The probabilities of occurrence, confidentiality, integrity and availability as well as the damage scenarios in the event of occurrence are also considered. As part of the risk analysis, record and document which processes, hazards and risks are relevant for your organisation. At the end of the risk analysis, you will have an overview of which risks are acceptable and for which risks the probability of occurrence must be reduced through suitable measures.<\/p>\n<\/div><\/div><\/div><\/section>\n<section class='av_toggle_section av-kvjn4orp-32440971b480f0d026836eda8d03fb6f'  itemscope=\"itemscope\" itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\" ><div role=\"tablist\" class=\"single_toggle\" data-tags=\"{All} \"  ><p id='toggle-toggle-id-3' data-fake-id='#toggle-id-3' class='toggler  av-title-above av-inherit-font-color hasCustomColor av-inherit-border-color'  itemprop=\"name\"  role='tab' tabindex='0' aria-controls='toggle-id-3' data-slide-speed=\"200\" data-title=\"Verfassen eines Ma\u00dfnahmenkataloges\" data-title-open=\"\" data-aria_collapsed=\"Click to expand: Verfassen eines Ma\u00dfnahmenkataloges\" data-aria_expanded=\"Click to collapse: Verfassen eines Ma\u00dfnahmenkataloges\">Drawing up a catalogue of measures<span class=\"toggle_icon\"><span class=\"vert_icon\"><\/span><span class=\"hor_icon\"><\/span><\/span><\/p><div id='toggle-id-3' aria-labelledby='toggle-toggle-id-3' role='region' class='toggle_wrap  av-title-above'   itemscope=\"itemscope\" itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" ><div class='toggle_content invers-color av-inherit-font-color hasCustomColor av-inherit-border-color'  itemprop=\"text\" ><p>Based on the classification and prioritisation of the risks, you can define which measures are to be taken. In doing so, it is important to record not only new measures but also measures that have already been implemented.<\/p>\n<\/div><\/div><\/div><\/section>\n<section class='av_toggle_section av-kvjmcdiw-02f7d417c5dfb5dffc72b38284ca2627'  itemscope=\"itemscope\" itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\" ><div role=\"tablist\" class=\"single_toggle\" data-tags=\"{All} \"  ><p id='toggle-toggle-id-4' data-fake-id='#toggle-id-4' class='toggler  av-title-above av-inherit-font-color hasCustomColor av-inherit-border-color'  itemprop=\"name\"  role='tab' tabindex='0' aria-controls='toggle-id-4' data-slide-speed=\"200\" data-title=\"Festlegung der Umsetzung und Verantwortlichkeiten\" data-title-open=\"\" data-aria_collapsed=\"Click to expand: Festlegung der Umsetzung und Verantwortlichkeiten\" data-aria_expanded=\"Click to collapse: Festlegung der Umsetzung und Verantwortlichkeiten\">Determination of implementation and responsibilities<span class=\"toggle_icon\"><span class=\"vert_icon\"><\/span><span class=\"hor_icon\"><\/span><\/span><\/p><div id='toggle-id-4' aria-labelledby='toggle-toggle-id-4' role='region' class='toggle_wrap  av-title-above'   itemscope=\"itemscope\" itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" ><div class='toggle_content invers-color av-inherit-font-color hasCustomColor av-inherit-border-color'  itemprop=\"text\" ><div class=\"et_pb_module et_pb_text et_pb_text_37 et_pb_text_align_left et_pb_bg_layout_light\">\n<div class=\"et_pb_text_inner\">\n<p>For each risk you can now select measures from the catalogue of measures. Define the goal of each measure and how its implementation can reduce the probability of occurrence or the damage caused by the risk. At the same time, define the persons responsible and the deadlines for implementation.<\/p>\n<\/div>\n<\/div>\n<\/div><\/div><\/div><\/section>\n<section class='av_toggle_section av-kvjmcdiw-1-1b7fede9487847e86f50f5537934a00c'  itemscope=\"itemscope\" itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\" ><div role=\"tablist\" class=\"single_toggle\" data-tags=\"{All} \"  ><p id='toggle-toggle-id-5' data-fake-id='#toggle-id-5' class='toggler  av-title-above av-inherit-font-color hasCustomColor av-inherit-border-color'  itemprop=\"name\"  role='tab' tabindex='0' aria-controls='toggle-id-5' data-slide-speed=\"200\" data-title=\"Durchf\u00fchrung von Wirksamkeit und Verbesserungen\" data-title-open=\"\" data-aria_collapsed=\"Click to expand: Durchf\u00fchrung von Wirksamkeit und Verbesserungen\" data-aria_expanded=\"Click to collapse: Durchf\u00fchrung von Wirksamkeit und Verbesserungen\">Implementation of effectiveness and improvements<span class=\"toggle_icon\"><span class=\"vert_icon\"><\/span><span class=\"hor_icon\"><\/span><\/span><\/p><div id='toggle-id-5' aria-labelledby='toggle-toggle-id-5' role='region' class='toggle_wrap  av-title-above'   itemscope=\"itemscope\" itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" ><div class='toggle_content invers-color av-inherit-font-color hasCustomColor av-inherit-border-color'  itemprop=\"text\" ><div class=\"et_pb_module et_pb_text et_pb_text_37 et_pb_text_align_left et_pb_bg_layout_light\">\n<div class=\"et_pb_text_inner\">\n<p>The defined measures are regularly checked for effectiveness by the information security officer; internal audits are particularly recommended for this purpose. If deficiencies or new risks are identified as a result of the audit, the ISMS will be adapted to the changed requirements.<\/p>\n<\/div>\n<\/div>\n<\/div><\/div><\/div><\/section>\n<\/div><\/p><\/div>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-jsujzx-e0fc73f75d6cce1a85bb807e88a24762\">\n.flex_column.av-jsujzx-e0fc73f75d6cce1a85bb807e88a24762{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div  class='flex_column av-jsujzx-e0fc73f75d6cce1a85bb807e88a24762 av_one_full  avia-builder-el-47  el_after_av_one_full  el_before_av_one_full  first flex_column_div av-zero-column-padding  column-top-margin'     ><section  id=\"normen-und-standards\"  class='av_textblock_section av-kv9n7kyx-a7c405171961ff1e7c5f21ea6ade1948'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h2>Necessary norms and standards<\/h2>\n<p>The International Organisation for Standardisation (ISO) and the International Electrotechnical Commission (IEC) have more than 20 standards relevant to information security, which are grouped under the number 2700x. They describe the sub-areas of information security management or IT security.<\/p>\n<p>Standards provide good support for the decision-making process. The most important security requirements as well as the corresponding measures are listed in the ISO\/IEC 27001 standard in conjunction with ISO7IEC 27002. Alternatively or as a supplement, the BSI's basic protection concept can be used. Due to the strictly prescribed procedures with extreme detailing, orientation on this is associated with a very high level of effort.<\/p>\n<p>When selecting the right standard, it is advisable to compare possible standards. Consider the question of applicability for your organisation; standards differ in terms of the organisational requirements for know-how in the implementation of the standard, the effort required for the development of a safety concept and the possibility of adapting the procedure to the specific needs of the company.<\/p>\n<h3>ISO 27001<\/h3>\n<p>This standard is of particular interest for information security management systems. It specifies requirements for the implementation, maintenance and continuous improvement of a documented ISMS, as well as requirements for the assessment of security risks. Companies can obtain certification according to ISO 27001.<\/p>\n<\/div><\/section><br \/>\n<section  id=\"iso-27005\"  class='av_textblock_section av-kvkr30h6-06e30c5e8bf9e86b36dab0286c0d7b3f'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h3>ISO 27005<\/h3>\n<p>This standard is titled \"Risk Analysis Management\" and focuses on the assessment and management of risks.  In this standard<\/p>\n<ul>\n<li>detailed guidance on risk analysis,<\/li>\n<li>Precise description of the process for establishing an efficient risk analysis<\/li>\n<li>a detailed description of the individual process steps<\/li>\n<\/ul>\n<\/div><\/section><br \/>\n<section  id=\"it-grundschutz-bsi\"  class='av_textblock_section av-kvkrrzmr-7e88329de5e9d93463078f860457db87'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h3>BSI Basic IT Protection Compendium<\/h3>\n<p>The IT-Grundschutzkompendium of the Federal Office for Information Security comprises a comprehensive collection of texts. These texts are called \"IT-Grundschutz-Bausteine\" (basic IT protection modules) and each deal with all security-relevant aspects of a specific topic, such as ISMS. The requirements contained therein are divided into basic, standard and requirements for increased protection needs. In this way, companies can decide specifically and individually for themselves which level of protection should be achieved.<\/p>\n<p><span class=\"TextRun SCXW146564834 BCX0\" lang=\"DE-DE\" xml:lang=\"DE-DE\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW146564834 BCX0\">The IT-Grundschutz catalogue of the German Federal Office for Information Security (BSI) presents concepts for IT security.<\/span><span class=\"NormalTextRun SCXW146564834 BCX0\">s for the implementation of ISMS.\u00a0<\/span><span class=\"NormalTextRun SCXW146564834 BCX0\">Assistance for the introduction, implementation and maintenance of the\u00a0<\/span><span class=\"NormalTextRun SCXW146564834 BCX0\">offers<\/span><span class=\"NormalTextRun SCXW146564834 BCX0\">\u00a0the BSI standard 100-1<\/span><span class=\"NormalTextRun SCXW146564834 BCX0\">which is adapted to the international standard ISO\/IEC 27001.\u00a0<\/span><\/span><span class=\"EOP SCXW146564834 BCX0\" data-ccp-props=\"{\">\u00a0<\/span><\/p>\n<p><em><strong>BSI Standard 100 vs. 200<\/strong><\/em><\/p>\n<p>The BSI's \"100 series\" deals with the establishment of an ISMS as well as risk management. In October 2017, the series was completely replaced by the BSI standards 200-1, 200-2 and 200-3.<\/p>\n<ul>\n<li>BSI 200-1 - \"Management Systems for Information Security\" describes the general requirements for an ISMS and is compatible with ISO\/IEC 27001.<\/li>\n<li>BSI 200-2 - The \"IT-Grundschutz-Methodik\" forms the basis for IT-Grundschutz. It contains three proven procedures for the realisation of IT-Grundschutz.<\/li>\n<\/ul>\n<ol>\n<li>Basic assurance: consider the introduction of an ISMS<\/li>\n<li>Core protection: Description of how a small part of a larger IT network can be covered by an ISMS.<\/li>\n<li>Standard safeguarding: description of a complete safeguarding process<\/li>\n<\/ol>\n<ul>\n<li>BSI 200-3 - \"Risk Management\" - Bundling of all risk-related work steps for the implementation of IT-Grundschutz. This includes the identification of elementary hazards, the risk classification and the handling of risks.<\/li>\n<\/ul>\n<p><a href=\"https:\/\/www.bsi.bund.de\/DE\/Themen\/Unternehmen-und-Organisationen\/Standards-und-Zertifizierung\/IT-Grundschutz\/IT-Grundschutz-Kompendium\/it-grundschutz-kompendium_node.html\" target=\"_blank\" rel=\"noopener\">\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-18hi5j1-697959d21c59dd82331daf81f9bf38e2\">\n.av_font_icon.av-18hi5j1-697959d21c59dd82331daf81f9bf38e2 .av-icon-char{\nfont-size:20px;\nline-height:20px;\n}\n<\/style>\n<span  class='av_font_icon av-18hi5j1-697959d21c59dd82331daf81f9bf38e2 avia_animate_when_visible av-icon-style- avia-icon-pos-left avia-iconfont avia-font-entypo-fontello av-no-color avia-icon-animate'><span class='av-icon-char' data-av_icon='\ue88d' data-av_iconfont='entypo-fontello' aria-hidden=\"true\" ><\/span><\/span> To the overview page of the BSI IT-Grundschutz Compendium<\/a><\/p>\n<\/div><\/section><br \/>\n<section  id=\"b3s\"  class='av_textblock_section av-kvks68z5-7705dfc8297c767ae7a1ffe351dce313'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h3>Industry-specific security standards (B3S) of the BSI<\/h3>\n<p>The industry-specific security standards are standards developed by operators or their associations that provide information about the requirements and the state of the art to be implemented. The industry standards created are reviewed and recognised by the BSI upon request. They serve as a guide for organisations in the same industry. Based on the implementation of the B3S, organisations can prove to the BSI that the industry standards on the state of the art have been implemented. After the implementation of the respective B3S has been verified by the BSI, organisations gain legal certainty.<\/p>\n<p><a href=\"https:\/\/www.bsi.bund.de\/DE\/Themen\/KRITIS-und-regulierte-Unternehmen\/Kritische-Infrastrukturen\/Allgemeine-Infos-zu-KRITIS\/Stand-der-Technik-umsetzen\/Branchenspezifische-Sicherheitsstandards-B3S\/branchenspezifische-sicherheitsstandards-b3s_node.html;jsessionid=19B021B028E28CEC8DC45C92DD30DE61.internet482\" target=\"_blank\" rel=\"noopener\">\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-pjbol9-9ecb2d7ffec5f5cefda998794d681231\">\n.av_font_icon.av-pjbol9-9ecb2d7ffec5f5cefda998794d681231 .av-icon-char{\nfont-size:20px;\nline-height:20px;\n}\n<\/style>\n<span  class='av_font_icon av-pjbol9-9ecb2d7ffec5f5cefda998794d681231 avia_animate_when_visible av-icon-style- avia-icon-pos-left avia-iconfont avia-font-entypo-fontello av-no-color avia-icon-animate'><span class='av-icon-char' data-av_icon='\ue88d' data-av_iconfont='entypo-fontello' aria-hidden=\"true\" ><\/span><\/span> To the BSI's B3S overview page (external link)<\/a><\/p>\n<\/div><\/section><\/p><\/div>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-lnwvlr19-991ab73f398ac11daeef03a380fb83ba\">\n.flex_column.av-lnwvlr19-991ab73f398ac11daeef03a380fb83ba{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div  id=\"isms-software\"  class='flex_column av-lnwvlr19-991ab73f398ac11daeef03a380fb83ba av_one_full  avia-builder-el-54  el_after_av_one_full  el_before_av_one_full  first flex_column_div av-zero-column-padding  column-top-margin'     ><section  class='av_textblock_section av-lnwvleql-e77717ac0db62da23ee1efa232be4956'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h2>ISMS software<\/h2>\n<p><strong>ISMS software<\/strong> stands for \"<strong>Information Security Management System Software<\/strong>\". This software supports companies in implementing, monitoring and managing information security measures. It facilitates the documentation of policies, risk assessments, security measures and the protection of sensitive information. ISMS software can also facilitate compliance with security standards and regulations and improve security incident response. ISMS software automates and streamlines tasks to improve information security in organisations and ensure the protection of sensitive information.<\/p>\n<p>The tasks of an ISMS software include:<\/p>\n<ol>\n<li><strong>Documentation<\/strong>: Creation, storage and management of security policies, procedures and documentation.<\/li>\n<li><a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/compliance-management-in-the-company-3\"><strong>Risk assessment<\/strong><\/a>: Support in the identification, assessment and prioritisation of security risks.<\/li>\n<li><strong>Action planning<\/strong>: Preparation of safety action plans to mitigate risks.<\/li>\n<li><strong>Compliance management<\/strong>: Ensure compliance with safety standards and legal requirements.<\/li>\n<li><strong>Monitoring and reporting<\/strong>: Continuously monitor safety metrics and produce reports.<\/li>\n<li><strong>Incident Management<\/strong>: Support in responding to security incidents and data breaches.<\/li>\n<li><strong>Audit management<\/strong>: Logging and monitoring of activities related to information security.<\/li>\n<li><strong>Access control<\/strong>: Managing permissions and access to sensitive data and systems.<\/li>\n<li><strong>Training and awareness raising<\/strong>: Provide training materials and safety awareness programmes for employees.<\/li>\n<li><strong>Document management:<\/strong> Storage and management of safety-related documents and reports.<\/li>\n<li><strong>Updating and adaptation<\/strong>Support in the regular updating and adaptation of the ISMS.<\/li>\n<\/ol>\n<\/div><\/section><\/div>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-1r15nb1-f7081967fa8e9139ccba370d30937025\">\n.flex_column.av-1r15nb1-f7081967fa8e9139ccba370d30937025{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div  id=\"video\"  class='flex_column av-1r15nb1-f7081967fa8e9139ccba370d30937025 av_one_full  avia-builder-el-56  el_after_av_one_full  el_before_av_one_full  first flex_column_div av-zero-column-padding  column-top-margin'     ><p>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-lv3udvsz-7db4d2018d8ce8a4e554fec6d4a601b1\">\n#top .av-special-heading.av-lv3udvsz-7db4d2018d8ce8a4e554fec6d4a601b1{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-lv3udvsz-7db4d2018d8ce8a4e554fec6d4a601b1 .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-lv3udvsz-7db4d2018d8ce8a4e554fec6d4a601b1 .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  id=\"video\"  class='av-special-heading av-lv3udvsz-7db4d2018d8ce8a4e554fec6d4a601b1 av-special-heading-h2 blockquote modern-quote  avia-builder-el-57  el_before_av_image  avia-builder-el-first'><h2 class='av-special-heading-tag'  itemprop=\"headline\"  >Video on the implementation of an information security management system<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-lv3ugfyp-861948977b0c718f4c724952f857e37b\">\n.avia-image-container.av-lv3ugfyp-861948977b0c718f4c724952f857e37b img.avia_image{\nbox-shadow:none;\n}\n.avia-image-container.av-lv3ugfyp-861948977b0c718f4c724952f857e37b .av-image-caption-overlay-center{\ncolor:#ffffff;\n}\n<\/style>\n<div  class='avia-image-container av-lv3ugfyp-861948977b0c718f4c724952f857e37b av-styling- av-img-linked avia-align-left  avia-builder-el-58  el_after_av_heading  el_before_av_hr  tp_de2'   itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\" ><div class=\"avia-image-container-inner\"><div class=\"avia-image-overlay-wrap\"><a href=\"#formular-1\" class='avia_image'  aria-label='Presentation-Hacks-ISMS'><img decoding=\"async\" class='wp-image-16562 avia-img-lazy-loading-not-16562 avia_image' src=\"https:\/\/media.robin-data.io\/2021\/10\/17163132\/Praesentation-Hacks-ISMS-1030x579.png\" alt='' title='Presentation-Hacks-ISMS'  height=\"579\" width=\"1030\"  itemprop=\"thumbnailUrl\" srcset=\"https:\/\/media.robin-data.io\/2021\/10\/17163132\/Praesentation-Hacks-ISMS-1030x579.png 1030w, https:\/\/media.robin-data.io\/2021\/10\/17163132\/Praesentation-Hacks-ISMS-300x169.png 300w, https:\/\/media.robin-data.io\/2021\/10\/17163132\/Praesentation-Hacks-ISMS-768x432.png 768w, https:\/\/media.robin-data.io\/2021\/10\/17163132\/Praesentation-Hacks-ISMS-1536x864.png 1536w, https:\/\/media.robin-data.io\/2021\/10\/17163132\/Praesentation-Hacks-ISMS-18x10.png 18w, https:\/\/media.robin-data.io\/2021\/10\/17163132\/Praesentation-Hacks-ISMS-1500x844.png 1500w, https:\/\/media.robin-data.io\/2021\/10\/17163132\/Praesentation-Hacks-ISMS-705x397.png 705w, https:\/\/media.robin-data.io\/2021\/10\/17163132\/Praesentation-Hacks-ISMS.png 2000w\" sizes=\"(max-width: 1030px) 100vw, 1030px\" \/><\/a><\/div><\/div><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-1b6b8hp-4f5afd8e311b281b4227f125c0ba7800\">\n#top .hr.hr-invisible.av-1b6b8hp-4f5afd8e311b281b4227f125c0ba7800{\nheight:25px;\n}\n<\/style>\n<div  id=\"schritte\"  class='hr av-1b6b8hp-4f5afd8e311b281b4227f125c0ba7800 hr-invisible  avia-builder-el-59  el_after_av_image  el_before_av_textblock'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n<section  id=\"formular\"  class='av_textblock_section av-lv3ufqqj-e5b3383a2b322ef3c9fe97e52b8653ad'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p style=\"font-size: 20px; color: #00b3bd;\">Watch the video on implementing an information security management system:<\/p>\n<p>Do you want to improve the security of sensitive information in your organisation while proactively addressing risks? An information security management system (ISMS) can help you protect your data and ensure compliance with applicable regulations.<\/p>\n<p>In the recording of the one-hour Robin Data Hack on 16 April 2024, you will gain a comprehensive insight into the implementation and maintenance of an effective ISMS. Existing customers will also benefit from attending, as we will show what opportunities ComplianceOS offers and provide helpful tips and advice. The Robin Data Hacks take place online and participation is free of charge. <a href=\"https:\/\/www.robin-data.io\/en\/events\/hacks\">Further information, dates and the opportunity to register.<\/a><\/p>\n<\/div><\/section><br \/>\n<br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-ofhs7x-5097a4afed9786c6f66250d8ccf077d3\">\n.avia_message_box.av-ofhs7x-5097a4afed9786c6f66250d8ccf077d3{\nbackground-color:rgba(244,150,0,0.3);\ncolor:#303440;\n}\n.avia_message_box.av-ofhs7x-5097a4afed9786c6f66250d8ccf077d3 .avia_message_box_icon.avia-svg-icon svg:first-child{\nfill:#303440;\nstroke:#303440;\n}\n<\/style>\n<div id='avia-messagebox-' class='avia_message_box av_notification av-ofhs7x-5097a4afed9786c6f66250d8ccf077d3 avia-color-custom avia-size-large avia-icon_select-no avia-border-  avia-builder-el-62  el_after_av_codeblock  avia-builder-el-last  tp_en2' ><div class=\"avia_message_box_content\"><p>Unfortunately this content is currently only available in German. Please feel free to <a href=\"https:\/\/www.robin-data.io\/en\/contact#formular\">contact us<\/a> for more information.<\/p>\n<\/div><\/div><\/p><\/div><\/p>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-289nlz1-2de2c9fc2da40c172977af2957d43df2\">\n.flex_column.av-289nlz1-2de2c9fc2da40c172977af2957d43df2{\npadding:35px 25px 30px 25px;\nbackground-color:#01064a;\nbackground:linear-gradient( to top right, #01064a, #00b3bd );\n}\n<\/style>\n<div  class='flex_column av-289nlz1-2de2c9fc2da40c172977af2957d43df2 av_one_full  avia-builder-el-63  el_after_av_one_full  el_before_av_one_full  first flex_column_div  column-top-margin'     ><p>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-1u1kokd-191abd1e75a0b0070d2da9998a065d1b\">\n.iconbox.av-1u1kokd-191abd1e75a0b0070d2da9998a065d1b .iconbox_icon{\ncolor:#ffffff;\n}\n.iconbox.av-1u1kokd-191abd1e75a0b0070d2da9998a065d1b .iconbox_icon.avia-svg-icon svg:first-child{\nfill:#ffffff;\nstroke:#ffffff;\n}\n#top #wrap_all .iconbox.av-1u1kokd-191abd1e75a0b0070d2da9998a065d1b .iconbox_content_title{\ncolor:#ffffff;\n}\n.iconbox.av-1u1kokd-191abd1e75a0b0070d2da9998a065d1b .iconbox_content_container{\ncolor:#ffffff;\n}\n<\/style>\n<article  class='iconbox iconbox_left_content av-1u1kokd-191abd1e75a0b0070d2da9998a065d1b av-icon-style-no-border  avia-builder-el-64  el_before_av_textblock  avia-builder-el-first'  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='iconbox_icon heading-color avia-iconfont avia-font-complianceos' data-av_icon='\ue901' data-av_iconfont='complianceos'  ><\/div><div class=\"iconbox_content\"><header class=\"entry-content-header\" aria-label=\"Icon: Robin Data ComplianceOS\u00ae Information Security field\"><h3 class='iconbox_content_title'  itemprop=\"headline\" >Robin Data ComplianceOS\u00ae Field Information Security<\/h3><\/header><div class='iconbox_content_container av_inherit_color'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><br \/>\n<section  class='av_textblock_section av-dtin1-72d0848dd73e639094c770e89bfadc9d'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p><span style=\"color: #ffffff;\">With Robin Data ComplianceOS\u00ae you implement the requirements for ISMS digitally. Import standards such as ISO 27001 or BSI Grundschutz and implement their requirements step by step and with guidance. From the implementation of risk management to documentation, Robin Data always provides you with the right tool. In this way, you save valuable time and involve all stakeholders in the implementation of the information security management system in an uncomplicated way.<\/span><\/p>\n<\/div><\/section><br \/>\n<div  class='avia-button-wrap av-vw4kd9-8c27184411ded0e2ff9caa88b8dc2384-wrap avia-button-left  avia-builder-el-66  el_after_av_textblock  avia-builder-el-last'>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-vw4kd9-8c27184411ded0e2ff9caa88b8dc2384\">\n#top #wrap_all .avia-button.av-vw4kd9-8c27184411ded0e2ff9caa88b8dc2384{\nbackground-color:#00b3bd;\nborder-color:#00b3bd;\ncolor:#ffffff;\nborder-radius:1px 1px 1px 1px;\ntransition:all 0.4s ease-in-out;\n}\n#top #wrap_all .avia-button.av-vw4kd9-8c27184411ded0e2ff9caa88b8dc2384:hover{\nbackground-color:white;\ncolor:#00b3bd;\ntransition:all 0.4s ease-in-out;\n}\n#top #wrap_all.avia-button.av-vw4kd9-8c27184411ded0e2ff9caa88b8dc2384:hover .avia_button_background{\nborder-radius:1px 1px 1px 1px;\n}\n#top #wrap_all .avia-button.av-vw4kd9-8c27184411ded0e2ff9caa88b8dc2384 .avia-svg-icon svg:first-child{\nfill:#ffffff;\nstroke:#ffffff;\n}\n#top #wrap_all .avia-button.av-vw4kd9-8c27184411ded0e2ff9caa88b8dc2384:hover .avia-svg-icon svg:first-child{\nfill:#00b3bd;\nstroke:#00b3bd;\n}\n<\/style>\n<a href='https:\/\/www.robin-data.io\/en\/information-security'  class='avia-button av-vw4kd9-8c27184411ded0e2ff9caa88b8dc2384 av-link-btn avia-icon_select-no avia-size-large avia-position-left'   aria-label=\"Learn more\"><span class='avia_iconbox_title' >Learn more<\/span><\/a><\/div><\/p><\/div>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-zecgm5-ee514211df8d4cf42dc95bb36ca34589\">\n.flex_column.av-zecgm5-ee514211df8d4cf42dc95bb36ca34589{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div  id=\"fazit\"  class='flex_column av-zecgm5-ee514211df8d4cf42dc95bb36ca34589 av_one_full  avia-builder-el-67  el_after_av_one_full  el_before_av_one_full  first flex_column_div av-zero-column-padding  column-top-margin'     ><section  id=\"normen-und-standards\"  class='av_textblock_section av-lnwwlr2g-7ddbdb0289c554ec744421b060e9b5df'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h2>Conclusion<\/h2>\n<p>In summary, an ISMS (Information Security Management System) is crucial to ensure information security in organisations. It provides a structured method for identifying, assessing and managing security risks. ISMS software assists in documenting, managing and monitoring security measures, which facilitates compliance and ensures the protection of sensitive data. A well-implemented ISMS helps minimise security incidents and data breaches. It also promotes security awareness among employees through training and awareness programmes. Overall, an ISMS is an indispensable tool to ensure information security and minimise risks in the digital age.<\/p>\n<\/div><\/section><\/div>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-vxqfp9-5e6a614c65c2f01ccf009ef887b668c6\">\n.flex_column.av-vxqfp9-5e6a614c65c2f01ccf009ef887b668c6{\npadding:35px 25px 30px 25px;\nbackground-color:#01064a;\nbackground:linear-gradient( to top right, #01064a, #00b3bd );\n}\n<\/style>\n<div  class='flex_column av-vxqfp9-5e6a614c65c2f01ccf009ef887b668c6 av_one_full  avia-builder-el-69  el_after_av_one_full  el_before_av_one_full  first flex_column_div  column-top-margin'     ><p>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-lnwwmwl3-60fd174540683de6b8dd2a6cdb310fad\">\n.iconbox.av-lnwwmwl3-60fd174540683de6b8dd2a6cdb310fad .iconbox_icon{\ncolor:#ffffff;\n}\n.iconbox.av-lnwwmwl3-60fd174540683de6b8dd2a6cdb310fad .iconbox_icon.avia-svg-icon svg:first-child{\nfill:#ffffff;\nstroke:#ffffff;\n}\n#top #wrap_all .iconbox.av-lnwwmwl3-60fd174540683de6b8dd2a6cdb310fad .iconbox_content_title{\ncolor:#ffffff;\n}\n.iconbox.av-lnwwmwl3-60fd174540683de6b8dd2a6cdb310fad .iconbox_content_container{\ncolor:#ffffff;\n}\n<\/style>\n<article  class='iconbox iconbox_left_content av-lnwwmwl3-60fd174540683de6b8dd2a6cdb310fad av-icon-style-no-border  avia-builder-el-70  el_before_av_textblock  avia-builder-el-first'  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='iconbox_icon heading-color avia-iconfont avia-font-entypo-fontello' data-av_icon='\ue83c' data-av_iconfont='entypo-fontello'  ><\/div><div class=\"iconbox_content\"><header class=\"entry-content-header\" aria-label=\"Icon: Contact us\"><h3 class='iconbox_content_title'  itemprop=\"headline\" >Contact us<\/h3><\/header><div class='iconbox_content_container av_inherit_color'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><br \/>\n<section  class='av_textblock_section av-lnwwn97x-73322f75a77ef9543bc255c10a1235e7'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p><span style=\"color: #ffffff;\">We will be happy to answer your questions or provide you with an individual offer.<\/span><\/p>\n<\/div><\/section><br \/>\n<div  class='avia-button-wrap av-lnwwo5io-6d279e4bafce98610b7bf4fdc829edb0-wrap avia-button-left  avia-builder-el-72  el_after_av_textblock  avia-builder-el-last'>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-lnwwo5io-6d279e4bafce98610b7bf4fdc829edb0\">\n#top #wrap_all .avia-button.av-lnwwo5io-6d279e4bafce98610b7bf4fdc829edb0{\nbackground-color:#00b3bd;\nborder-color:#00b3bd;\ncolor:#ffffff;\nborder-radius:1px 1px 1px 1px;\ntransition:all 0.4s ease-in-out;\n}\n#top #wrap_all .avia-button.av-lnwwo5io-6d279e4bafce98610b7bf4fdc829edb0:hover{\nbackground-color:white;\ncolor:#00b3bd;\ntransition:all 0.4s ease-in-out;\n}\n#top #wrap_all.avia-button.av-lnwwo5io-6d279e4bafce98610b7bf4fdc829edb0:hover .avia_button_background{\nborder-radius:1px 1px 1px 1px;\n}\n#top #wrap_all .avia-button.av-lnwwo5io-6d279e4bafce98610b7bf4fdc829edb0 .avia-svg-icon svg:first-child{\nfill:#ffffff;\nstroke:#ffffff;\n}\n#top #wrap_all .avia-button.av-lnwwo5io-6d279e4bafce98610b7bf4fdc829edb0:hover .avia-svg-icon svg:first-child{\nfill:#00b3bd;\nstroke:#00b3bd;\n}\n<\/style>\n<a href='https:\/\/www.robin-data.io\/en\/contact'  class='avia-button av-lnwwo5io-6d279e4bafce98610b7bf4fdc829edb0 av-link-btn avia-icon_select-no avia-size-large avia-position-left'   aria-label=\"Request without obligation\"><span class='avia_iconbox_title' >Request without obligation<\/span><\/a><\/div><\/p><\/div>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-38irt4-a3265c4a84bbfe7bcd111a53bb63e885\">\n.flex_column.av-38irt4-a3265c4a84bbfe7bcd111a53bb63e885{\nborder-radius:10px 10px 10px 10px;\npadding:50 px 50 px 50 px 50 px;\nbackground-color:#f7f7f7;\n}\n<\/style>\n<div  class='flex_column av-38irt4-a3265c4a84bbfe7bcd111a53bb63e885 av_one_full  avia-builder-el-73  el_after_av_one_full  el_before_av_one_full  first flex_column_div  column-top-margin'     ><p><br \/>\n<div  class='av-social-sharing-box av-ka3jmz4x-5dcebd1f09db7c20daac0063288815c9 av-social-sharing-box-default  avia-builder-el-75  el_after_av_codeblock  avia-builder-el-last  av-social-sharing-box-fullwidth'><div class=\"av-share-box\"><h5 class='av-share-link-description av-no-toc'>Do you like the piece? Feel free to share it.<\/h5><ul class=\"av-share-box-list noLightbox\"><li class='av-share-link av-social-link-facebook avia_social_iconfont' ><a target=\"_blank\" aria-label=\"Share on Facebook\" href='https:\/\/www.facebook.com\/sharer.php?u=https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/isms-definition-what-is-an-information-security-management-system&#038;t=ISMS%3A%20Definition%2C%20Umsetzung%2C%20Normen' data-av_icon='\ue8f3' data-av_iconfont='entypo-fontello'  title='' data-avia-related-tooltip='Share on Facebook'><span class='avia_hidden_link_text'>Share on Facebook<\/span><\/a><\/li><li class='av-share-link av-social-link-twitter avia_social_iconfont' ><a target=\"_blank\" aria-label=\"Share on X\" href='https:\/\/twitter.com\/share?text=ISMS%3A%20Definition%2C%20Umsetzung%2C%20Normen&#038;url=https:\/\/www.robin-data.io\/en\/?p=12189' data-av_icon='\ue932' data-av_iconfont='entypo-fontello'  title='' data-avia-related-tooltip='Share on X'><span class='avia_hidden_link_text'>Share on X<\/span><\/a><\/li><li class='av-share-link av-social-link-linkedin avia_social_iconfont' ><a target=\"_blank\" aria-label=\"Share on LinkedIn\" href='https:\/\/linkedin.com\/shareArticle?mini=true&#038;title=ISMS%3A%20Definition%2C%20Umsetzung%2C%20Normen&#038;url=https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/isms-definition-what-is-an-information-security-management-system' data-av_icon='\ue8fc' data-av_iconfont='entypo-fontello'  title='' data-avia-related-tooltip='Share on LinkedIn'><span class='avia_hidden_link_text'>Share on LinkedIn<\/span><\/a><\/li><li class='av-share-link av-social-link-mail avia_social_iconfont' ><a  aria-label=\"Share by Mail\" href='mailto:?subject=ISMS%3A%20Definition%2C%20Umsetzung%2C%20Normen&#038;body=https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/isms-definition-what-is-an-information-security-management-system' data-av_icon='\ue805' data-av_iconfont='entypo-fontello'  title='' data-avia-related-tooltip='Share by Mail'><span class='avia_hidden_link_text'>Share by Mail<\/span><\/a><\/li><\/ul><\/div><\/div><\/p><\/div>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-228ehv-1ea72c1e17300415ef12cb2b1a9f645d\">\n.flex_column.av-228ehv-1ea72c1e17300415ef12cb2b1a9f645d{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div  class='flex_column av-228ehv-1ea72c1e17300415ef12cb2b1a9f645d av_one_full  avia-builder-el-76  el_after_av_one_full  avia-builder-el-last  first flex_column_div av-zero-column-padding  column-top-margin'     ><section  class='av_textblock_section av-kaqhth2e-c0ce0e9fc51ca4569850f4a16f47c8e1'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h3 style=\"text-align: center;\">This might interest you too:<\/h3>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-kaqhpdsy-c149d804dc26de4da98e9603962fa194\">\n#top .hr.hr-invisible.av-kaqhpdsy-c149d804dc26de4da98e9603962fa194{\nheight:25px;\n}\n<\/style>\n<div  class='hr av-kaqhpdsy-c149d804dc26de4da98e9603962fa194 hr-invisible  avia-builder-el-78  el_after_av_textblock  el_before_av_blog'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n<div  data-slideshow-options=\"{&quot;animation&quot;:&quot;fade&quot;,&quot;autoplay&quot;:false,&quot;loop_autoplay&quot;:&quot;once&quot;,&quot;interval&quot;:5,&quot;loop_manual&quot;:&quot;manual-endless&quot;,&quot;autoplay_stopper&quot;:false,&quot;noNavigation&quot;:false,&quot;show_slide_delay&quot;:90}\" class='avia-content-slider avia-content-grid-active avia-content-slider1 avia-content-slider-odd  avia-builder-el-79  el_after_av_hr  avia-builder-el-last  av-slideshow-ui av-control-default   av-no-slider-navigation av-slideshow-manual av-loop-once av-loop-manual-endless'  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/Blog\" ><div class=\"avia-content-slider-inner\"><div class=\"slide-entry-wrap\"><article class='slide-entry flex_column  post-entry post-entry-16316 slide-entry-overview slide-loop-1 slide-parity-odd  av_one_third first real-thumbnail posttype-post post-format-standard' aria-label=\"Slide: TISAX requirements: Prepare certification step by step\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/compliance-management-in-the-company-7' data-rel='slide-1' class='slide-image' title='TISAX requirements: Prepare certification step by step'><img decoding=\"async\" width=\"495\" height=\"343\" src=\"https:\/\/media.robin-data.io\/2022\/12\/07140455\/IT-Sicherheitsvorfall-495x343.png\" class=\"wp-image-15255 avia-img-lazy-loading-not-15255 attachment-portfolio size-portfolio wp-post-image\" alt=\"IT security incident\" \/><\/a><div class=\"slide-content\"><header class=\"entry-content-header\"><h3 class='slide-entry-title entry-title'  itemprop=\"headline\" ><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/compliance-management-in-the-company-7' title='TISAX requirements: Prepare certification step by step'>TISAX requirements: Prepare certification step by step<\/a><\/h3><span class=\"blog-categories minor-meta\"><a href=\"https:\/\/www.robin-data.io\/en\/category\/data-protection-and-data-security-academy\/wiki\" rel=\"tag\">Wiki<\/a> <\/span><span class=\"av-vertical-delimiter\"><\/span><\/header><div class='slide-entry-excerpt entry-content'  itemprop=\"text\" >TISAX\u00ae requirements: Information on the question catalogue, maturity levels and certification. Prepare the assessment level and audit.<div class=\"read-more-link\"><a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/compliance-management-in-the-company-7\" class=\"more-link\">Read more<span class='more-link-arrow avia-svg-icon avia-font-svg_entypo-fontello' data-av_svg_icon='right-open-big' data-av_iconset='svg_entypo-fontello'><svg version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"15\" height=\"32\" viewbox=\"0 0 15 32\" preserveaspectratio=\"xMidYMid meet\" role=\"graphics-symbol\" aria-hidden=\"true\">\n<path d=\"M0.416 27.84l11.456-11.84-11.456-11.904q-0.832-0.832 0-1.536 0.832-0.832 1.536 0l12.544 12.608q0.768 0.832 0 1.6l-12.544 12.608q-0.704 0.832-1.536 0-0.832-0.704 0-1.536z\"><\/path>\n<\/svg><\/span><\/a><\/div><\/div><\/div><footer class=\"entry-footer\"><div class=\"slide-meta\"><time class='slide-meta-time updated'  itemprop=\"datePublished\" datetime=\"2024-01-08T13:19:57+01:00\" >8 January 2024<\/time><div class=\"slide-meta-del\">\/<\/div><div class=\"slide-meta-comments\"><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/compliance-management-in-the-company-7#respond'>0 Comments<\/a><\/div><\/div><\/footer><span class='hidden'>\n\t\t\t\t<span class='av-structured-data'  itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\" >\n\t\t\t\t\t\t<span itemprop='url'>https:\/\/media.robin-data.io\/2022\/12\/07140455\/IT-Sicherheitsvorfall.png<\/span>\n\t\t\t\t\t\t<span itemprop='height'>343<\/span>\n\t\t\t\t\t\t<span itemprop='width'>685<\/span>\n\t\t\t\t<\/span>\n\t\t\t\t<span class='av-structured-data'  itemprop=\"publisher\" itemtype=\"https:\/\/schema.org\/Organization\" itemscope=\"itemscope\" >\n\t\t\t\t\t\t<span itemprop='name'>Caroline Schwabe<\/span>\n\t\t\t\t\t\t<span itemprop='logo' itemscope itemtype='https:\/\/schema.org\/ImageObject'>\n\t\t\t\t\t\t\t<span itemprop='url'>https:\/\/media.robin-data.io\/2022\/07\/05140916\/Robin-Data_ComplianceOS_white_logo.png<\/span>\n\t\t\t\t\t\t<\/span>\n\t\t\t\t<\/span><span class='av-structured-data'  itemprop=\"author\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/Person\" ><span itemprop='name'>Caroline Schwabe<\/span><\/span><span class='av-structured-data'  itemprop=\"datePublished\" datetime=\"2021-10-26T14:56:51+02:00\" >2024-01-08 13:19:57<\/span><span class='av-structured-data'  itemprop=\"dateModified\" itemtype=\"https:\/\/schema.org\/dateModified\" >2025-03-24 16:15:24<\/span><span class='av-structured-data'  itemprop=\"mainEntityOfPage\" itemtype=\"https:\/\/schema.org\/mainEntityOfPage\" ><span itemprop='name'>TISAX requirements: Prepare certification step by step<\/span><\/span><\/span><\/article><article class='slide-entry flex_column  post-entry post-entry-15168 slide-entry-overview slide-loop-2 slide-parity-even  av_one_third  real-thumbnail posttype-post post-format-standard' aria-label=\"Slide: What to do in the event of an IT security incident?\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/what-to-do-it-security-incident' data-rel='slide-1' class='slide-image' title='What to do in the event of an IT security incident?'><img decoding=\"async\" width=\"495\" height=\"343\" src=\"https:\/\/media.robin-data.io\/2022\/12\/07140455\/IT-Sicherheitsvorfall-495x343.png\" class=\"wp-image-15255 avia-img-lazy-loading-not-15255 attachment-portfolio size-portfolio wp-post-image\" alt=\"IT security incident\" \/><\/a><div class=\"slide-content\"><header class=\"entry-content-header\"><h3 class='slide-entry-title entry-title'  itemprop=\"headline\" ><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/what-to-do-it-security-incident' title='What to do in the event of an IT security incident?'>What to do in the event of an IT security incident?<\/a><\/h3><span class=\"blog-categories minor-meta\"><a href=\"https:\/\/www.robin-data.io\/en\/category\/data-protection-and-data-security-academy\/wiki\" rel=\"tag\">Wiki<\/a> <\/span><span class=\"av-vertical-delimiter\"><\/span><\/header><div class='slide-entry-excerpt entry-content'  itemprop=\"text\" >The most important facts about IT security incidents. Learn practical tips on recognising and dealing with IT emergencies in the article.<div class=\"read-more-link\"><a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/what-to-do-it-security-incident\" class=\"more-link\">Read more<span class='more-link-arrow avia-svg-icon avia-font-svg_entypo-fontello' data-av_svg_icon='right-open-big' data-av_iconset='svg_entypo-fontello'><svg version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"15\" height=\"32\" viewbox=\"0 0 15 32\" preserveaspectratio=\"xMidYMid meet\" role=\"graphics-symbol\" aria-hidden=\"true\">\n<path d=\"M0.416 27.84l11.456-11.84-11.456-11.904q-0.832-0.832 0-1.536 0.832-0.832 1.536 0l12.544 12.608q0.768 0.832 0 1.6l-12.544 12.608q-0.704 0.832-1.536 0-0.832-0.704 0-1.536z\"><\/path>\n<\/svg><\/span><\/a><\/div><\/div><\/div><footer class=\"entry-footer\"><div class=\"slide-meta\"><time class='slide-meta-time updated'  itemprop=\"datePublished\" datetime=\"2022-12-07T13:52:45+01:00\" >7 December 2022<\/time><div class=\"slide-meta-del\">\/<\/div><div class=\"slide-meta-comments\"><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/what-to-do-it-security-incident#respond'>0 Comments<\/a><\/div><\/div><\/footer><span class='hidden'>\n\t\t\t\t<span class='av-structured-data'  itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\" >\n\t\t\t\t\t\t<span itemprop='url'>https:\/\/media.robin-data.io\/2022\/12\/07140455\/IT-Sicherheitsvorfall.png<\/span>\n\t\t\t\t\t\t<span itemprop='height'>343<\/span>\n\t\t\t\t\t\t<span itemprop='width'>685<\/span>\n\t\t\t\t<\/span>\n\t\t\t\t<span class='av-structured-data'  itemprop=\"publisher\" itemtype=\"https:\/\/schema.org\/Organization\" itemscope=\"itemscope\" >\n\t\t\t\t\t\t<span itemprop='name'>Caroline Schwabe<\/span>\n\t\t\t\t\t\t<span itemprop='logo' itemscope itemtype='https:\/\/schema.org\/ImageObject'>\n\t\t\t\t\t\t\t<span itemprop='url'>https:\/\/media.robin-data.io\/2022\/07\/05140916\/Robin-Data_ComplianceOS_white_logo.png<\/span>\n\t\t\t\t\t\t<\/span>\n\t\t\t\t<\/span><span class='av-structured-data'  itemprop=\"author\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/Person\" ><span itemprop='name'>Caroline Schwabe<\/span><\/span><span class='av-structured-data'  itemprop=\"datePublished\" datetime=\"2021-10-26T14:56:51+02:00\" >2022-12-07 13:52:45<\/span><span class='av-structured-data'  itemprop=\"dateModified\" itemtype=\"https:\/\/schema.org\/dateModified\" >2025-03-24 13:40:32<\/span><span class='av-structured-data'  itemprop=\"mainEntityOfPage\" itemtype=\"https:\/\/schema.org\/mainEntityOfPage\" ><span itemprop='name'>What to do in the event of an IT security incident?<\/span><\/span><\/span><\/article><article class='slide-entry flex_column  post-entry post-entry-11257 slide-entry-overview slide-loop-3 slide-parity-odd  post-entry-last  av_one_third  real-thumbnail posttype-post post-format-standard' aria-label=\"Slide: Protection of information and data\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/information-security-definition' data-rel='slide-1' class='slide-image' title='Protection of information and data'><img decoding=\"async\" width=\"495\" height=\"343\" src=\"https:\/\/media.robin-data.io\/2022\/05\/23150310\/Datenschutzpanne-495x343.jpg\" class=\"wp-image-14055 avia-img-lazy-loading-not-14055 attachment-portfolio size-portfolio wp-post-image\" alt=\"\" \/><\/a><div class=\"slide-content\"><header class=\"entry-content-header\"><h3 class='slide-entry-title entry-title'  itemprop=\"headline\" ><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/information-security-definition' title='Protection of information and data'>Protection of information and data<\/a><\/h3><span class=\"blog-categories minor-meta\"><a href=\"https:\/\/www.robin-data.io\/en\/category\/data-protection-and-data-security-academy\/wiki\" rel=\"tag\">Wiki<\/a> <\/span><span class=\"av-vertical-delimiter\"><\/span><\/header><div class='slide-entry-excerpt entry-content'  itemprop=\"text\" >What is information security? Tasks of the information security officer and differentiation from data protection.<div class=\"read-more-link\"><a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/information-security-definition\" class=\"more-link\">Read more<span class='more-link-arrow avia-svg-icon avia-font-svg_entypo-fontello' data-av_svg_icon='right-open-big' data-av_iconset='svg_entypo-fontello'><svg version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"15\" height=\"32\" viewbox=\"0 0 15 32\" preserveaspectratio=\"xMidYMid meet\" role=\"graphics-symbol\" aria-hidden=\"true\">\n<path d=\"M0.416 27.84l11.456-11.84-11.456-11.904q-0.832-0.832 0-1.536 0.832-0.832 1.536 0l12.544 12.608q0.768 0.832 0 1.6l-12.544 12.608q-0.704 0.832-1.536 0-0.832-0.704 0-1.536z\"><\/path>\n<\/svg><\/span><\/a><\/div><\/div><\/div><footer class=\"entry-footer\"><div class=\"slide-meta\"><time class='slide-meta-time updated'  itemprop=\"datePublished\" datetime=\"2021-07-13T11:25:11+02:00\" >13 July 2021<\/time><div class=\"slide-meta-del\">\/<\/div><div class=\"slide-meta-comments\"><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/information-security-definition#respond'>0 Comments<\/a><\/div><\/div><\/footer><span class='hidden'>\n\t\t\t\t<span class='av-structured-data'  itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\" >\n\t\t\t\t\t\t<span itemprop='url'>https:\/\/media.robin-data.io\/2022\/05\/23150310\/Datenschutzpanne.jpg<\/span>\n\t\t\t\t\t\t<span itemprop='height'>343<\/span>\n\t\t\t\t\t\t<span itemprop='width'>685<\/span>\n\t\t\t\t<\/span>\n\t\t\t\t<span class='av-structured-data'  itemprop=\"publisher\" itemtype=\"https:\/\/schema.org\/Organization\" itemscope=\"itemscope\" >\n\t\t\t\t\t\t<span itemprop='name'>Caroline Schwabe<\/span>\n\t\t\t\t\t\t<span itemprop='logo' itemscope itemtype='https:\/\/schema.org\/ImageObject'>\n\t\t\t\t\t\t\t<span itemprop='url'>https:\/\/media.robin-data.io\/2022\/07\/05140916\/Robin-Data_ComplianceOS_white_logo.png<\/span>\n\t\t\t\t\t\t<\/span>\n\t\t\t\t<\/span><span class='av-structured-data'  itemprop=\"author\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/Person\" ><span itemprop='name'>Caroline Schwabe<\/span><\/span><span class='av-structured-data'  itemprop=\"datePublished\" datetime=\"2021-10-26T14:56:51+02:00\" >2021-07-13 11:25:11<\/span><span class='av-structured-data'  itemprop=\"dateModified\" itemtype=\"https:\/\/schema.org\/dateModified\" >2025-08-13 12:44:28<\/span><span class='av-structured-data'  itemprop=\"mainEntityOfPage\" itemtype=\"https:\/\/schema.org\/mainEntityOfPage\" ><span itemprop='name'>Protection of information and data<\/span><\/span><\/span><\/article><\/div><\/div><\/div><\/p><\/div>","protected":false},"excerpt":{"rendered":"<p>All information on the information security management system: delimitation of DPMS, notes on implementation, norms and standards<\/p>","protected":false},"author":3,"featured_media":14055,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[71],"tags":[122,169,120],"class_list":["post-12189","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-wiki","tag-einfuehrung","tag-informationssicherheit","tag-it-sicherheit"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.8 (Yoast SEO v26.8) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Was ist ein Informationssicherheits Management System (ISMS)?<\/title>\n<meta name=\"description\" content=\"Informationssicherheits-Management-System (ISMS): Regeln, Methoden und die wichtigsten Normen und Standards f\u00fcr die Informationssicherheit.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/information-security-definition\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ISMS: Definition, Umsetzung, Normen\" \/>\n<meta property=\"og:description\" content=\"Informationssicherheits-Management-System (ISMS): Regeln, Methoden und die wichtigsten Normen und Standards f\u00fcr die Informationssicherheit.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/information-security-definition\" \/>\n<meta property=\"og:site_name\" content=\"Robin Data GmbH\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/robindatade\/\" \/>\n<meta property=\"article:published_time\" content=\"2021-10-26T12:56:51+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-03-24T12:40:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/media.robin-data.io\/2022\/05\/23150310\/Datenschutzpanne.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"685\" \/>\n\t<meta property=\"og:image:height\" content=\"343\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Caroline Schwabe\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@RobinData_DE\" \/>\n<meta name=\"twitter:site\" content=\"@RobinData_DE\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Caroline Schwabe\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"17 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/isms-definition-was-ist-ein-informationssicherheits-management-system\"},\"author\":{\"name\":\"Caroline Schwabe\",\"@id\":\"https:\/\/www.robin-data.io\/#\/schema\/person\/83e2bd965d3e87f50c5da3c0b541dfe5\"},\"headline\":\"ISMS: Definition, Umsetzung, Normen\",\"datePublished\":\"2021-10-26T12:56:51+00:00\",\"dateModified\":\"2025-03-24T12:40:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/isms-definition-was-ist-ein-informationssicherheits-management-system\"},\"wordCount\":10905,\"commentCount\":0,\"image\":{\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition#primaryimage\"},\"thumbnailUrl\":\"https:\/\/media.robin-data.io\/2022\/05\/23150310\/Datenschutzpanne.jpg\",\"keywords\":[\"Einf\u00fchrung\",\"Informationssicherheit\",\"IT-Sicherheit\"],\"articleSection\":[\"Wiki\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition#respond\"]}]},{\"@type\":[\"WebPage\",\"ItemPage\"],\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/isms-definition-was-ist-ein-informationssicherheits-management-system\",\"url\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition\",\"name\":\"Was ist ein Informationssicherheits Management System (ISMS)?\",\"isPartOf\":{\"@id\":\"https:\/\/www.robin-data.io\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition#primaryimage\"},\"thumbnailUrl\":\"https:\/\/media.robin-data.io\/2022\/05\/23150310\/Datenschutzpanne.jpg\",\"datePublished\":\"2021-10-26T12:56:51+00:00\",\"dateModified\":\"2025-03-24T12:40:26+00:00\",\"author\":{\"@id\":\"https:\/\/www.robin-data.io\/#\/schema\/person\/83e2bd965d3e87f50c5da3c0b541dfe5\"},\"description\":\"Informationssicherheits-Management-System (ISMS): Regeln, Methoden und die wichtigsten Normen und Standards f\u00fcr die Informationssicherheit.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition#primaryimage\",\"url\":\"https:\/\/media.robin-data.io\/2022\/05\/23150310\/Datenschutzpanne.jpg\",\"contentUrl\":\"https:\/\/media.robin-data.io\/2022\/05\/23150310\/Datenschutzpanne.jpg\",\"width\":685,\"height\":343},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\/\/www.robin-data.io\/startseite\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ISMS: Definition, Umsetzung, Normen\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.robin-data.io\/#website\",\"url\":\"https:\/\/www.robin-data.io\/\",\"name\":\"Robin Data GmbH\",\"description\":\"Robin Data ComplianceOS\u00ae Das Compliance Operating System\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.robin-data.io\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.robin-data.io\/#\/schema\/person\/83e2bd965d3e87f50c5da3c0b541dfe5\",\"name\":\"Caroline Schwabe\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.robin-data.io\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4afcd09464d8c4418a7e62c3fdd2103c84addcb37103428b60586d9b32b79b3f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4afcd09464d8c4418a7e62c3fdd2103c84addcb37103428b60586d9b32b79b3f?s=96&d=mm&r=g\",\"caption\":\"Caroline Schwabe\"},\"description\":\"Frau Schwabe ist Informationsdesignerin und Datenschutzbeauftragte. Der Schwerpunkt ihrer Arbeit liegt darin, Kunden und Interessenten mit Beitr\u00e4gen in der Robin Data Datenschutz-Akademie weiterzuhelfen.\",\"url\":\"https:\/\/www.robin-data.io\/en\/author\/csc\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"What is an Information Security Management System (ISMS)?","description":"Information Security Management System (ISMS): Rules, methods and the most important norms and standards for information security.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/information-security-definition","og_locale":"en_GB","og_type":"article","og_title":"ISMS: Definition, Umsetzung, Normen","og_description":"Informationssicherheits-Management-System (ISMS): Regeln, Methoden und die wichtigsten Normen und Standards f\u00fcr die Informationssicherheit.","og_url":"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/information-security-definition","og_site_name":"Robin Data GmbH","article_publisher":"https:\/\/www.facebook.com\/robindatade\/","article_published_time":"2021-10-26T12:56:51+00:00","article_modified_time":"2025-03-24T12:40:26+00:00","og_image":[{"width":685,"height":343,"url":"https:\/\/media.robin-data.io\/2022\/05\/23150310\/Datenschutzpanne.jpg","type":"image\/jpeg"}],"author":"Caroline Schwabe","twitter_card":"summary_large_image","twitter_creator":"@RobinData_DE","twitter_site":"@RobinData_DE","twitter_misc":{"Written by":"Caroline Schwabe","Estimated reading time":"17 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition#article","isPartOf":{"@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/isms-definition-was-ist-ein-informationssicherheits-management-system"},"author":{"name":"Caroline Schwabe","@id":"https:\/\/www.robin-data.io\/#\/schema\/person\/83e2bd965d3e87f50c5da3c0b541dfe5"},"headline":"ISMS: Definition, Umsetzung, Normen","datePublished":"2021-10-26T12:56:51+00:00","dateModified":"2025-03-24T12:40:26+00:00","mainEntityOfPage":{"@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/isms-definition-was-ist-ein-informationssicherheits-management-system"},"wordCount":10905,"commentCount":0,"image":{"@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition#primaryimage"},"thumbnailUrl":"https:\/\/media.robin-data.io\/2022\/05\/23150310\/Datenschutzpanne.jpg","keywords":["Einf\u00fchrung","Informationssicherheit","IT-Sicherheit"],"articleSection":["Wiki"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition#respond"]}]},{"@type":["WebPage","ItemPage"],"@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/isms-definition-was-ist-ein-informationssicherheits-management-system","url":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition","name":"What is an Information Security Management System (ISMS)?","isPartOf":{"@id":"https:\/\/www.robin-data.io\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition#primaryimage"},"image":{"@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition#primaryimage"},"thumbnailUrl":"https:\/\/media.robin-data.io\/2022\/05\/23150310\/Datenschutzpanne.jpg","datePublished":"2021-10-26T12:56:51+00:00","dateModified":"2025-03-24T12:40:26+00:00","author":{"@id":"https:\/\/www.robin-data.io\/#\/schema\/person\/83e2bd965d3e87f50c5da3c0b541dfe5"},"description":"Information Security Management System (ISMS): Rules, methods and the most important norms and standards for information security.","breadcrumb":{"@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition#primaryimage","url":"https:\/\/media.robin-data.io\/2022\/05\/23150310\/Datenschutzpanne.jpg","contentUrl":"https:\/\/media.robin-data.io\/2022\/05\/23150310\/Datenschutzpanne.jpg","width":685,"height":343},{"@type":"BreadcrumbList","@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/informationssicherheit-definition#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/www.robin-data.io\/startseite"},{"@type":"ListItem","position":2,"name":"ISMS: Definition, Umsetzung, Normen"}]},{"@type":"WebSite","@id":"https:\/\/www.robin-data.io\/#website","url":"https:\/\/www.robin-data.io\/","name":"Robin Data GmbH","description":"Robin Data ComplianceOS\u00ae The Compliance Operating System","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.robin-data.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/www.robin-data.io\/#\/schema\/person\/83e2bd965d3e87f50c5da3c0b541dfe5","name":"Caroline Schwabe","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.robin-data.io\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4afcd09464d8c4418a7e62c3fdd2103c84addcb37103428b60586d9b32b79b3f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4afcd09464d8c4418a7e62c3fdd2103c84addcb37103428b60586d9b32b79b3f?s=96&d=mm&r=g","caption":"Caroline Schwabe"},"description":"Ms. Schwabe is an information designer and Data Protection Officer. The focus of her work is to help customers and interested parties with contributions to the Robin Data Privacy Academy.","url":"https:\/\/www.robin-data.io\/en\/author\/csc"}]}},"_links":{"self":[{"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/posts\/12189","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/comments?post=12189"}],"version-history":[{"count":58,"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/posts\/12189\/revisions"}],"predecessor-version":[{"id":12628,"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/posts\/12189\/revisions\/12628"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/media\/14055"}],"wp:attachment":[{"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/media?parent=12189"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/categories?post=12189"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/tags?post=12189"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}