Preparation towards ISMS Certification 27001: An Experience in Malaysian Nuclear Agency

In the present day, information and communication security has emerged as one of the most important issue. Nowadays, the information security incidents have most often been reported and the loss of enterprise operation is getting serious because of information security incidents. Therefore, the requirement to have an effective management framework of information security is vital especially in organizations that dealing with sensitive data and information like Malaysia Nuclear Agency. Therefore, Cabinet meeting on 24th February 2010 had decided that agencies that fall under CNII category shall implement MS ISO/IEC 27001 (Information Security Management System-ISMS) to safeguard organizational data and information. This international standard includes personnel security, technology security, physical security and management security. This paper will briefly describe how the preparation towards the certification is being done and the challenges that the working team has to face.In the present day, information and communication security has emerged as one of the most important issue. Nowadays, the information security incidents have most often been reported and the loss of enterprise operation is getting serious because of information security incidents. Therefore, the requirement to have an effective management framework of information security is vital especially in organizations that dealing with sensitive data and information like Malaysia Nuclear Agency. Therefore, Cabinet meeting on 24th February 2010 had decided that agencies that fall under CNII category shall implement MS ISO/IEC 27001 (Information Security Management System-ISMS) to safeguard organizational data and information. This international standard includes personnel security, technology security, physical security and management security. This paper will briefly describe how the preparation towards the certification is being done and the challenges that the working team has to face. (author)