ISO 27001, the international standard for information security, is a specification for an information security management system (ISMS). An ISMS is a framework of policies and procedures that organizations use to protect their information assets.
You can download a free playbook we’ve written on how to respond to security incidents in AWS. We’ve also released a free platform for performing incident response and forensics in AWS that deploys in minutes with CloudFormation.
ISO 27001 is a widely recognized and respected standard. Many organizations, including the U.S. government, require their contractors to be certified to ISO 27001.
Organizations that want to certify to ISO 27001 must first implement an ISMS that meets the requirements of the standard. The ISMS must be implemented and operated in accordance with the requirements of the standard, and must be audited and certified by an accredited certification body.
Organizations that are certified to ISO 27001 are allowed to use the ISO 27001 certification mark. The certification mark is a symbol of quality and assurance that the organization’s ISMS meets the requirements of the standard.
The benefits of certification to ISO 27001 include:
– Increased confidence that the organization’s information assets are protected
– Reduced risk of data breaches and other information security incidents
– Demonstration of due diligence to customers, partners, and regulators
– Improved information security posture and reduced risk to business operations
AWS provides a range of services that can help organizations implement and operate an ISO 27001-compliant ISMS. These services include:
– AWS Identity and Access Management (IAM) to manage user access to AWS resources
– AWS CloudTrail to track user activity and log changes made to AWS resources
– AWS Config to track changes to AWS resources and settings
– AWS Key Management Service (KMS) to encrypt data and manage keys
– AWS Trusted Advisor to identify security and compliance issues in AWS environments
Organizations that want to implement an ISO 27001-compliant ISMS should consider using AWS. AWS can help organizations quickly and easily deploy a compliant ISMS, and can help reduce the risk of data breaches and other information security incidents.
Source:
https://medium.com/@cloud_tips/iso-27001-in-aws-75a596894147
