OIS-01—Information Security Management System (ISMS)
>Control Description
The Cloud Service Provider operates an information security management system (ISMS) in accordance with ISO/IEC 27001. The scope of the ISMS covers the Cloud Service Provider's organisational units, locations and procedures for providing the cloud service.
The measures for setting up, implementing, maintaining and continuously improving the ISMS are documented.
The documentation includes:
• Scope of the ISMS (Section 4.3 of ISO/IEC 27001);
• Declaration of applicability (Section 6.1.3), and
• Results of the last management review (Section 9.3).
Additional criteria: The Information Security Management System (ISMS) has a valid certification according to ISO/IEC 27001 or ISO 27001 based on IT-Grundschutz.
Ask AI
Configure your API key to use AI features.