Project Management Approach to the Implementation of an ISMS and its Certification Against the ISO/IEC 27001

Abstract

Analysis of the PM processes completed during the implementation of the ISO/IEC 27001 information security standard in a medium size company, and discussion of the adequacy of the choice of processes adopted and discarded, by means of a contrastive matrix that confronts classic PM processes, the ISO recommendations and the strategy followed by the project team.