Search in ISMS Guides


Wednesday, July 25, 2007

Why can’t I choose what processes to implement to get my ISM3 based ISMS system certified ?

Choice is generally speaking good, but too much choice leads to very different ISMS getting the same certification. As non-equivalent ISMS shouldn’t get the same certificate, choice is restricted for certification, but not, obviously, for implementation.


No comments: