What is a Management System?

Set of interrelated or interacting elements of an organization to establish policies and objectives and processes to achieve those objectives.

  • Organization: Person or group of people that has its own functions with responsibilities, authorities and relationships to achieve its objectives.
  • Policy: <organization> intentions and direction of an organization as formally expressed by its top management.
  • Objective: Result to be achieved.
  • Process: Set of interrelated or interacting activities that use inputs to deliver an intended result.

What is an Information Security Management System?

Set of policies and objectives and processes that seek to preserve confidentiality, integrity and availability of information.

  • Confidentiality: Property that information is not made available or disclosed to unauthorized individuals, entities, or processes.
  • Integrity: Property of accuracy and completeness.
  • Availability: Property of being accessible and usable on demand by an authorized entity.

What is a Privacy Information Management System?

Information security management system which addresses the protection of privacy as potentially affected by the processing of Personally Identifiable Information (PII).

Kompleye’s Certification Process

If you are moving forward with the implementation of your management systems under the guidelines of ISO 27001 and ISO 27701, the certification process involves…

An ISO certification is valid for three years; however, ISO requires that surveillance audits be performed each year to ensure that the management system continues to operate effectively. This means that every 12 months during the 3-year cycle, an organization’s management system (MS) must undergo an external audit, where an auditor will assess portions of MS.

For detailed information on this process, Please click here to learn more.

Click here to see Kompleye accreditation information