Adopting and implementing ISO standards for information security is a challenging process.

On April 16th, in Ho Chi Minh City, the Southern Branch of the Vietnam Information Security Association (VNISA Southern Branch), together with the Ho Chi Minh City Digital Transformation Center and DNV Vietnam Company, organized the workshop "ISO/IEC 27001 Information Security and Privacy Protection for Businesses in the Digital Age".

Representatives from the Ho Chi Minh City Digital Transformation Center introduced the standards for information security.

Mr. Hoang Quang Hai, lecturer and lead assessor at DNV Vietnam, shared insights focusing on the fundamental elements of the standard, including risk identification, assessment and management, establishing information security policies and procedures, and technical security measures.

Through examples and practical experiences, DNV Vietnam helps businesses better understand how to implement and maintain an information security system according to this standard.

The workshop highlighted that implementing an information security management system based on ISO/IEC 27001:2022 standards to protect data and comply with legal regulations is crucial for data protection, and information security standards play an essential role in protecting an organization's data and information systems in the digital age.

However, adopting and implementing ISO standards for information security can be a challenging process; requiring thorough preparation and systematic execution, as well as commitment and effort from leadership, staff, and all stakeholders within the organization.

The ISO/IEC 27701:2019 standard also focuses on personal information management systems (PIMS), outlining the basic requirements and principles of the standard, and providing guidance on how to develop, implement, and maintain an effective personal information management system, helping organizations comply with current data protection and privacy regulations.

“Digital transformation means digitizing data and using information systems more extensively. This makes organizations vulnerable to cyberattacks and data leaks if they lack security measures. Adhering to information security standards helps establish the necessary security measures to protect data and systems from cyber threats. From there, organizations and units will enhance their competitiveness, operational efficiency, affirm their core values, and improve their standing and customer trust,” according to Mr. Nguyen Duc Chung, Deputy Director of the Ho Chi Minh City Digital Transformation Center.

KIM THANH

Source: https://www.sggp.org.vn/tiep-can-va-trien-khai-chuan-iso-ve-an-toan-thong-tin-la-mot-qua-trinh-day-thach-thuc-post735635.html