Om hiran kanishka chandrasena page 9 of 16

O.M. Hiran Kanishka Chandrasena Page
9
of
16

Information Security Management System
7. Information systems, development and maintenance
 Security requirement maintenance objectives: The security available, integrity parts add in
information system. Prevent errors, loss damages, and unauthorized access of the
information system.
8. Information security incident management
 Management of information incident security improvements objectives: Ensure the
effective approach of the management information security incidents consistence and also
information system communication timely corrective.
9. Information security incident management
 Report information security & incident management objectives: The information security
events which use to associate with the communication systems and the weakness of the
system allow by timely to truthful the action to be take that event. Thus the effective
approach to applied information security incident which related to the relevant measures.
10. Business control management
 Information security characteristics to business continuity management objective: The
interruption of the business activities to defend the critical business areas process that can
be happen major failures of the management system controls.
11. Compliance
 Compliance of legal requirements objectives: breaches the security law valuations to avoid
and contractual responsibly of the security requirements and also the information structural
policies and standards
O.M. Hiran Kanishka Chandrasena Page
10
of
16

Information Security Management System
Figure 4.3.2 ISO reach the goals
4.4
Advantages of the ISMS certification to organization
 Provide the operational process of the information security plan in the organization
 Provide best practices on independence to manage the organization conformity
 Information security enhance with the authority with the organization
 Issue evidence and assurance to the organization to reach the standards requirements
 The organization enhance the global arranging and company reputation
 Information security authority with the policy of the organization
 Escalation levels of information security
 Framework for legal and regulatory requirements
 Provide commencements to secure business
 Provide comparative edge
 Reduce the time and effort internal and external audits
O.M. Hiran Kanishka Chandrasena Page
11
of
16

Information Security Management System
5 Risk Assessing Information Security
Information security Risk Management System (RMS) was integrated in U.S government in
1999. This RMS provides risk management cycle with following charters;
Figure 5.1 Risk Management System Cycle
 Risk Assessment: The concept of the decision making information need to understand the
factors which affect the operation of the input and output of the company processes. This
includes identification of threats on the estimated chance of the occurrence. The base of the
past data which identifies the value of the concept of the assets that may be occur potential
victims, identify the cost enrolments to take action for risk results and proper implementation
results controls.