SNI ISO 27001 Anwar Siregar
Download as PPTX, PDF0 likes967 views
Diskusi Publik RPM SMPI 5 Agustus 2015 di Pus TIK Nasional, Narasumber Anwar Siregar
More Related Content
What's hot (20)
Viewers also liked (20)
Similar to SNI ISO 27001 Anwar Siregar (20)
More from Directorate of Information Security | Ditjen Aptika (9)
Recently uploaded (7)
SNI ISO 27001 Anwar Siregar
- 1. Copyright 息 2013 BSI. All rights reserved. Sertifikasi SNI/ISO 27001 Keep your confidential information safe Ciputat, 5 Agustus 2015
- 2. Copyright 息 2013 BSI. All rights reserved. Siklus audit sertifikasi SNI ISO 27001.
- 3. Copyright 息 2013 BSI. All rights reserved. 3 Application / New Contract Stage 1 Audit Stage 1 Audit Report Submitted Pre- Audit Corrective Action Stage 2 Audit Corrective Actions Follow-up audit 6/12-monthly CAV Corrective Actions Follow-up audit 3 year Y Renewal Assessment Visit Proses Sertifikasi SNI/ISO 27001 OPTIONAL major major Max. 3 months N Y Y Max. 3 months Company QUALITY MANAGEMENT SYSTEM ISO 9001:2008 This is to certify that: PT.BSI Indonesia Graha Mampang Holds Certificate No: FS 335999 and operates a Quality Management System which complies with the requirements of ISO 9001:2008 for the following scope: ( Scope Wording ) For and on behalf of BSI: ________________________ Managing Director Originally registered: 21/04/2011 Latest Issue: 21/04/2011 Expiry date: 20/04/2014 The certificate was issued electronically and remains the property of BSI and is bound by the conditions of contract. An electronic certificate can be authenticated online. Printed copies can be validated at www.bsi-global.com/ClientDirectory or telephone +(65)62700777. Further clarification regarding the scope of this certificate and the applicability of ISO 9001:2008 requirements may be obtained by consulting organization. The certificate is valid only if provided original copies are in complete set Singapore Headquarters: 460 Alexandra Road, #08-01/02, PSA Building, Singapore 119963 BSI Singapore is a subsidiary of British Standard Institution Certificate of Registration
- 4. Copyright 息 2013 BSI. All rights reserved. 4 Stage 1 Tinjauan Dokumen Tujuan dari audit stage 1 Menilai kesiapan klien untuk sertifikasi Mendapatkan pemahaman tentang kebijakan dan dan tujuan penerapan SNI/ISO 27001 Memastikan durasi penilaian stage 2 Mengevaluasi kecukupan dan efektivitas proses Focus audit Site tur pada fasilitas yang terdaftar dalam ruang lingkup sertifikat SNI/ISO 27001 Review terhadap proses dan penilaian risiko yang dilakukan Statement of Applicability SoA Kebijakan keamanan informasi dan tujuan, dan struktur SMPI Melihat ketersediaan dan kelengkapan dokumentasi SNI/ ISO 27001
- 5. Copyright 息 2013 BSI. All rights reserved. 5 Stage 2 Tinjauan Penerapan Tujuan dari audit stage 2 Memastikan bahwa klien mematuhi kebijakan, tujuan dan prosedur sendiri Memastikan komitmen dari penerapan semua persyaratan SNI/ISO 27001 dan pencapaian terhadapat tujuan dari organisasi Focus audit Penilaian terhadap keamanan informasi terkait resiko dan prosedur penilaian dapat di dibdandingkan dan di ukur efektivitasnya Tinjauan terhadap pemilihan kontrol di SoA, alasan pemilihan dan pengecualiannya Tinjauan terhadap kinerja kemanan informasi dan efektivitas pelaporan, tinjauan dan tujuan kemanan informasi Hubungan antara kontrol yang dipilih dan dilaksanakan,SoA, hasil risk assessment, hasil risk treatment plan dan tujuan atau kebijakan keamanan informasi Penerapan kontrol yang dipilih dalam SoA untuk menentukan apakah kontrol diimplementasikan dan efektif untuk mencapai tujuan yang telah ditetapkan Memastikan bahwa management sistem dapat memenuhi peraturan dan legal yang berlaku terhadap resiko kemanan informasi dan akibatnya