What is EN ISO 27287:2011 ?

EN ISO 27287:2011 is a widely recognized and respected technical standard that outlines the requirements for data security management systems. It is an essential framework for organizations to establish, implement, maintain, and continually improve their data security management systems.

The standard is designed to address the risks and vulnerabilities associated with the storage, processing, transmission, and disposal of information assets. It provides a comprehensive guide for establishing policies and procedures for managing sensitive data, as well as guidelines for ensuring the integrity, confidentiality, and availability of this information.

EN ISO 27287:2011 is made up of several key components, including:

The Data Security Management System (DSMS): This is a framework that outlines the processes and procedures that an organization should follow to establish, implement, maintain, and continually improve its data security management system.

The Data Protection Plans: These are documents that outline the policies and procedures that an organization should follow for managing its sensitive data.

The Data Classification Plans: These are documents that outline the policies and procedures for classifying sensitive data and determine the appropriate level of protection required.

The Data Retention and Disposal Plans: These are documents that outline the policies and procedures for retaining and disposing of sensitive data.

The purpose of EN ISO 27287:2011 is to provide a framework for organizations to establish, implement, maintain, and continually improve their data security management systems. It aims to address the risks and vulnerabilities associated with the storage, processing, transmission, and disposal of information assets, and ensure that sensitive data is protected to the required level.

In conclusion, EN ISO 27287:2011 is an essential standard for organizations that handle sensitive data. It provides a comprehensive guide for establishing, implementing, and maintaining a data security management system, as well as guidelines for ensuring the integrity, confidentiality, and availability of this information. By implementing this standard, organizations can reduce the risks and vulnerabilities associated with the storage, processing, transmission, and disposal of sensitive data, and protect their sensitive information from unauthorized access or disclosure.