ISO_27001:2005_LA訓練課程心得分享_2011_3/7~3/11

這5天的課程是由BSI的Bryan和Joe擔任講師,非常感謝他們兩位的講授,讓我對ISO 27001的標準內容本身連同稽核工作獲得相當多的認識與興趣,真的感到獲益匪淺,以下僅分享一點這幾天下來對ISO稽核的個人心得。

在過去我僅認為,組織的ISMS要取得ISO認證,就是要「面面俱到」,在每個細節上通過稽核員的檢驗。這種想法不能說不對,但上了課之後更領悟到須培養一種更整體、內在的觀點。

一個值得稱讚的ISMS(資訊安全管理系統)並不在於它是否在每個面向、每個控制項的實作上都做到滴水不漏;一個ISMS如果值得稱讚,除了它的架構符合基本規範之外,必定在於它是「活的」,以致能透過「P→D→C→A→P」的良性循環,不斷自我改進、完善,這應該是ISO 27001的核心精神。

這很像「數學歸納法」的精神,為了證明一個命題對所有的自然數成立,你不可能把逐一把自然數1、2、3……帶入該命題驗證,因為自然數是無窮多的(稽核活動中也不可能在極有限的時間裡逐一檢驗所有的細節),為了證明所證之事成立,數學歸納法的論證分為兩個步驟:

1.證明當 n = 1 時命題成立。

2.證明如果在 n = k 時命題成立,那麼可以推導出在 n = k+1 時命題也成立。(k 代表任意自然數)

如同爬一個無窮階的樓梯,第一步你必須能夠站穩第1階,第二步只要確認你有能力從任一階(第k階)向上跨到次一階(第k+1階),那麼你便可以有把握你能夠不斷往上爬(當然大前提是階梯的高度維持一致,以及你的體力不會衰竭)。

對照之下,如何檢驗一個ISMS是否合格呢? 稽核方向似乎可以歸納如下:

1.該ISMS的推行是否得到管理階層持續長久的支持(確保體力不會衰竭)

2.該ISMS是否在Plan與Do的階段具備合乎標準的基本架構(站穩第1階)

3.該ISMS是否能藉由Check與Action的階段獲得改善、進步(可從第k階上到第k+1階)

相反地,一個「死的」ISMS即使在剛開始能夠得到高分,終必因其缺乏循環改善的能力或是管理階層持續的支持,最終隨著時間、環境的遷移而慘遭淘汰。以上,是這次訓練的一點心得,與各位分享之。  黃亮鳴



38 Responses to “ISO_27001:2005_LA訓練課程心得分享_2011_3/7~3/11”

  1. Resources just like the one you mentioned here will be very helpful to me! I’ll put up a hyperlink to this page on my blog. I’m positive my visitors will discover that very useful. Huge thanks for the helpful info i found on Domain Information Anyway, in my language, there aren’t much good source like this.

  2. 897917 663266I enjoy reading write-up. Hope i can discover much more articles like this one. Thanks for posting. 893194

  3. 827888 56229We supply you with a table of all of the emoticons that can be used on this application, and the meaning of each symbol. Though it may well take some initial effort on your part, the skills garnered from regular and strategic use of social media will create a strong foundation to grow your business on ALL levels. 839426

  4. 772132 394032I also recommend HubPages itself, and Squidoo, which is related. 821507

  5. 507502 115304I completely agree! I came more than from google and am searching to subscribe. Exactly where is your RSS feed? 189572

  6. 577440 414405You may locate effective specific development of any L . a . Weight loss program and each and every you are incredibly crucial. To begin with level is an natural misplacing during the too significantly weight. shed belly fat 35028

  7. 701086 863129Youre so cool! I dont suppose Ive learn something like this before. So nice to search out any person with some unique thoughts on this subject. realy thank you for starting this up. this web site is one thing that

  8. 675755 637737Thank you for your great post! It has long been incredibly beneficial. I hope which you will proceed sharing your wisdom with us. 109713

  9. 304450 875551This internet internet site is often a walk-through rather than the details you wanted about it and didn

  10. 923223 119898Your post is truly informative. Far more than that, it??s engaging, compelling and well-written. I would desire to see even far more of these types of wonderful writing. 695297

  11. 833301 259321I saw a great deal of internet site but I feel this 1 contains something particular in it in it 706769

  12. 380547 597320Hello! I just wish to give a huge thumbs up for the good info you

  13. 559462 104642I adore what you guys are up too. Such clever work and exposure! Keep up the extremely great works guys I

  14. 269121 743229The specific New york Diet can be an highly affordable and versatile eating far better tool built for time expecting to loose fat along with naturally maintain a healthful everyday life. la weight loss 821347

  15. 122529 862110extremely nice post, i really adore this web website, keep on it 692074

  16. 428634 680309hi and thanks regarding the particular post ive really been searching regarding this kind of info online for sum time these days hence thanks a lot 763980

  17. 593192 149141Awesome weblog, I

  18. 417244 670422Thank you for having the time to discuss this topic. I truly appreciate it. I

  19. 26382 753161I like what you guys are up too. Such smart function and reporting! Carry on the superb works guys I

  20. 626384 414731Hey! Fine post! Please keep us posted when I can see a follow up! 83273

  21. 793460 989438Maintain up the wonderful piece of function, I read couple of posts on this internet web site and I believe that your internet weblog is actually fascinating and contains lots of superb details. 959996

  22. 468805 993805I conceive this web site contains some rattling superb details for everybody : D. 559089

  23. 379710 366172Greetings! This is my first comment here so I just wanted to give a quick shout out and tell you I genuinely enjoy reading through your blog posts. Can you recommend any other blogs/websites/forums that deal with the same topics? Thank you so much! 868346

  24. 959044 255557Man you legend. return see my website, you must get pleasure from it. 938941

  25. 967051 755861Read More HERE. I bookmarked it. 967856

  26. 675392 470692somehow located your web site when i was kind of stoned. excellent read 674925

  27. 452666 563586Constructive criticism is normally looked upon as becoming politically incorrect. 97212
    建設性的批判常常看起來是「政治不正確」的。

  28. 378329 375797Truly nice style and design and outstanding content , nothing at all else we require : D. 790815

  29. 804200 429079Howdy just wanted to give you a brief heads up and let you know a few of the pictures aren

  30. 561571 427933But wanna say that this is very helpful , Thanks for taking your time to write this. 253813

  31. 147670 63830I discovered your website site on google and check a couple of your early posts. Preserve in the top notch operate. I just extra up your Feed to my MSN News Reader. Looking for toward reading far more of your stuff afterwards!

  32. 149685 633224hi, your web site is truly great. I truly do appreciate your give great results 876998

  33. 837548 343041Aw, this became an very nice post. In thought I would like to devote writing such as this moreover – taking time and actual effort to make a extremely great article

  34. 901443 638178Basically wanna input on couple of common items, The internet site layout is perfect, the articles is genuinely very good : D. 583241

  35. 322216 559811Sorry for the huge review, but I

  36. 975499 951319This web website might be a walk-through for all of the details you wanted in regards to this and didn

  37. 69899 883231Read More HERE. I bookmarked it. 662635

  38. Really appreciate you sharing this post.Thanks Again. Really Great.

發表迴響

*

total of 817463 visits