ISMS Information Security Management system

BS7799 & ISO 27001:2005 are based on the PDCA principals, which requires documentation for Assets, Risks, Threats,
vulnerability and risk treatment plans. Normally the Management Representatives (MR) use worksheets like EXCEL for
creating various worksheets but managing these worksheets become virtually impossible when the number of assets
increase. Assettrack is a software which helps in accumulating and managing the information & documentation required
for the these standard in a professional way.

Following sections would take you through some basic concepts associated with Risk Assessment and Management. If
you are an expert on these processed then you can click on Live Demo for an actual demonstration.

Risk Assessment tool for ISMS In this information age, Information is a basic building block for every organization. Last
decade has witnessed the dramatic changes in the storage technology and today everything is moving from paper to
digital formats. Today Email is a d-facto standard for corporate communication. Transmission of information, storage of
information etc. are few more aspects of modern information.



In todays competitive business environment, such information is under threat from many sources. These sources can be
internal, external, accidental or malicious. The threats are increasing day by day due the technological advances in the
storage, transmission, retrieval of information.

This calls for establishing a comprehensive Security Policy within the organization, which ensure the confidentiality,
integrity and availability of vital corporate and customer information with due security.

ISMS Information Security Management system is a systematic approach to managing sensitive company information so
that it remains secure. It covers all aspects of information from people, processes to IT systems. Now there is an
international standard available ISO/IEC 27001:2005. The BS7799 is also an important standard for information security.

The standard can be applied through a process approach. The process should be build based upon then understanding
an organization information security requirements, establishing controls to manage information risks, monitoring and
reviewing the performance effectiveness and on a continual improvement. The standard adopts the Plan-Do-Check-Act
PDCA model, which is applied to structure all ISMS processes.

During the process of implementing ISMS there is a need for creating a Risk treatment plan and also it is necessary to do
a proper risk analysis.

Assettrack is a comprehensive solution which helps in managing the process of risk treatment and risk analysis using a
web enabled software.

Assettrack is a server centric software, which means it is loaded on the server and can be accessed from various
nodes across the enterprise. It offers an FTP transfer to the server which is very helpful in uploading the information on
the server.

Since Assettrack can be used across an Enterprise and hence it supports handling of multiple locations within an
enterprise. There can be multiple users for Assettrack and user can be assigned various locations to users. The
confidentiality of the information can be maintained because the users can access the information only from a specific
location.

Assettrack support two main entities namely Documents for ISMS and Assets.

Document Management:

There are many documents which need to be created for the ISMS process. These are the policies, Control documents,
SOA, Organization structure, information classification etc. It offers a facility for creating a repository of these
documents and also a facility for maintaining the version control for the revisions uploaded.

ISMS Information Security Management system is a systematic approach to managing sensitive company information