--- title: Information Risk Management description: Information Risk Management --- [![CyberShure-white & orange - transparent](https://www.cybershure.com/hs-fs/hubfs/CyberShure-white%20%26%20orange%20-%20transparent.png?width=2835&height=1654&name=CyberShure-white%20%26%20orange%20-%20transparent.png "CyberShure-white & orange - transparent")](https://www.cybershure.com) [![CyberShure_Word_Banner-removebg-preview-removebg-preview-2](https://www.cybershure.com/hs-fs/hubfs/CyberShure_Word_Banner-removebg-preview-removebg-preview-2.png?width=2835&height=612&name=CyberShure_Word_Banner-removebg-preview-removebg-preview-2.png "CyberShure_Word_Banner-removebg-preview-removebg-preview-2")](https://www.cybershure.com) - [Home](https://www.cybershure.com/home) - [Solutions](https://www.cybershure.com/solutions) - [Software](https://www.cybershure.com/software) - [Hardware](https://www.cybershure.com/hardware) - [Services](https://www.cybershure.com/services) - [Buy Online](https://cybershure-limited.square.site/s/shop) - [Web Shop](https://cybershure-limited.square.site/s/shop) - [Fudo One](https://www.cybershure.com/fudo-one) - [Partner](https://www.cybershure.com/partners) - [Become a Partner](https://share.hsforms.com/1wg79hJzqRZW3CwJONKIbxQ4pd5w) - [Partner Portal](https://cybershure.sharepoint.com/sites/CyberShurePartnerPortal) - [Deal Registration](https://share.hsforms.com/1DCGU1iWZSuG5cZqBvGN2Jw4pd5w) - Assessments - [Check DMARC](https://www.cybershure.com/dmarc) - [Check RISK](https://www.cybershure.com/free-risk-assessment) - [Newsroom](https://www.cybershure.com/newsroom) - [Blog](https://www.cybershure.com/blog) - [IT Web](https://www.itweb.co.za/office/cybershure) - [IT Web Africa](https://itweb.africa/office/cybershure) - [Contact](https://share.hsforms.com/1PjOuilm_T-uiyiutS6flkQ4pd5w) # Information Security Management System ![]({src=https://www.cybershure.com/hubfs/HomeBG-May-04-2022-06-34-51-36-PM.jpg,%20alt=HomeBG-May-04-2022-06-34-51-36-PM,%20width=1900,%20height=1200,%20max_width=1900,%20max_height=1200,%20size_type=auto}) ![Untitled-removebg-preview (4)](https://www.cybershure.com/hubfs/Untitled-removebg-preview%20(4).png) # Information Risk Management [Pierre F. Louw](https://www.cybershure.com/blog/author/pierre-f-louw) May 6, 2022 4:57:37 PM We find ourselves in a day and age where many organisations depend on technology to drive business processes in order to streamline operations and ultimately become more productive. Unfortunately, each and every technology-driven process comes with its own set of vulnerabilities that can expose security threats in an organisation. There are many solutions available to protect against this, and business usually is happy to add layers of protection in the hope that it leaves no weak points exposed in the network. In order to mitigate business risk, organisations refer to some framework that can assist with adopting a best practice methodology around information security. One such framework under the banner of the Information Security Management System (ISMS) is the standard called ISO 27001:2013. It is one of the most widely used standards in onboarding an information security policy. In fact, the ISO 27001 standard includes many of the controls required to fulfil GDPR. PoPPIA and the Data Protection Act. The ISMS framework focuses on Risk Assessment and Risk Management and consists of a set of security controls and control objectives; the 163 controls set the foundation and scope of mitigating potential threats associated with Information Security. ISMS and these ISO standards are in place to assist organisations in assessing their current security posture and making adjustments and improvements to stay ahead of the curve. A common practice suggested by ISO is to follow the Plan-Do-Check model for continuous improvement; 1. **Plan** Identify the problems and collect useful information to evaluate security risks. Define the policies and processes that can be used to address problem root causes. Develop methods to establish continuous improvement in information security management capabilities. 1. **Do** Implement the devised security policies and procedures. The implementation follows the ISO standards, but the actual implementation is based on the resources available to your company. 1. **Check** Monitor the effectiveness of ISMS policies and controls. Evaluate tangible outcomes as well as behavioural aspects associated with the ISM processes. 1. **Act** Focus on continuous improvement. Document the results, share knowledge and use a feedback loop to address future iterations of the PCDA model implementation of ISMS policies and controls. Starting a journey to compliance should not be feared, nor should it be taken lightly, done correctly could save businesses a significant amount of money and public embarrassment by protecting against security and privacy fraud. [![Share on facebook](https://7528309.fs1.hubspotusercontent-na1.net/hub/7528309/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/facebook-color.png?width=24&name=facebook-color.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fwww.cybershure.com%2Fblog%2Finformation-risk-management%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://7528302.fs1.hubspotusercontent-na1.net/hub/7528302/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/linkedin-color.png?width=24&name=linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.cybershure.com%2Fblog%2Finformation-risk-management%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://7528304.fs1.hubspotusercontent-na1.net/hub/7528304/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/twitter-color.png?width=24&name=twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fwww.cybershure.com%2Fblog%2Finformation-risk-management%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fwww.cybershure.com%2Fblog%2Finformation-risk-management%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://7528311.fs1.hubspotusercontent-na1.net/hub/7528311/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/email-color.png?width=24&name=email-color.png)](mailto:?subject=Check%20out%20https%3A%2F%2Fwww.cybershure.com%2Fblog%2Finformation-risk-management%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fwww.cybershure.com%2Fblog%2Finformation-risk-management%3Futm_medium%3Dsocial%26utm_source%3Demail) ## Read On [![CyberShure Tel](https://www.cybershure.com/hs-fs/hubfs/CyberShure%20Tel.png?width=1172&height=442&name=CyberShure%20Tel.png "CyberShure Tel")](https://www.cybershure.com) United Kingdom - 128 City Road, Walthamstow, Islington, London, EC1V 2NX South Africa - 24 Main Road, Noordhoek, Cape Town, 7979   [Go to the CyberShure Online Shop](https://cybershure-limited.square.site/s/shop)   [Follow us on LinkedIn](https://www.linkedin.com/company/cybershure) [Follow us on Twitter](https://twitter.com/cybershure) [Mail us](mailto:info@cybershure.com) - [Home](https://www.cybershure.com/home) - [Products](https://www.cybershure.com/solutions) - [Schedule Demo](https://outlook.office365.com/owa/calendar/CyberShure1@cybershure.com/bookings/) - [Log Support](https://share.hsforms.com/1OpcYjIBjRfmBpRIGT88MYg4pd5w) - [Partner Portal](https://cybershure.sharepoint.com/sites/CyberShurePartnerPortal) - [Contact Sales](mailto:%20info@cybershure.com) - [Privacy Policy](https://www.cybershure.com/privacy-policy) - [Cookie Policy](https://www.cybershure.com/cookie-policy) - [Terms of Use](https://www.cybershure.com/terms-of-use) Copyright © CyberShure Distribution 2020. All Rights Reserved. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Pierre F. Louw", "url" : "https://www.cybershure.com/blog/author/pierre-f-louw" }, "dateModified" : "2023-10-19T09:27:42.678Z", "datePublished" : "2022-05-06T15:57:37.000Z", "headline" : "Information Risk Management", "mainEntityOfPage" : { "@id" : "https://www.cybershure.com/blog/information-risk-management", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.cybershure.com/hubfs/CyberShure%20Logo%20Dark%20BG%20Final-1.jpg" }, "name" : "CYBERSHURE" } } ```