AISP - ITSC Information Security Standards - ISO 27001 Series: Talk #3 - A Strategy to Implement an ISMS with Affordable Budget and Resource

Talk #3 - A Strategy to Implement an ISMS with Affordable Budget and Resource by Mr Philip Sy, Principal Consultant

Synopsis: ISO/IEC 27001 is the most widely used information security management framework in majority of organizations in the world now. However, implementing an information security management system (ISMS) and the relevant security best practices are still seen as one of the bigger challenges in today's organization, especially for small and medium sized enterprises. This talk intends to describe overall view of ISMS framework and recommend a strategy to plan and implement the project in a relevant and cost effective way.

Speaker Biography: Being one of the pioneers in information security management and business continuity management, Philip has contributed to both local and international standardization especially in the field of information security and disaster recovery.

He has conducted numerous consultancy and audit services to both local and overseas organizations. He is an ISO/IEC JTC1 SC27 project editor in charge of the development of ISO/IEC 27031 - Guidelines for ICT Readiness for Business Continuity and the published ISO/IEC 24762 - Guideline to Disaster Recovery Services, which is the first international standard in ICT DR service provision. He is also the editor of the SS507:2008 - Singapore Standard on ICT Disaster Recovery Services.

Philip is a member of the Security & Privacy Standards Technical Committee (SPSTC) under ITSC. He chairs the ISMS Working Group and is an active member of the BC/DR Working Group and joint BCM Working Group of the TC.