Working in the ISO/IEC 27000 domain

In the ISO/IEC 27000 domain, you model an information security management system (ISMS) in accordance with ISO/IEC 27001 in your organization and for the defined scope:

• Get to know the domain ISO/IEC 27000.
• Create the inventory directory.
• Create the Statement of Applicability (SoA).
• Carry out the risk management.
• Apply the risk profile according to DIN ISO/IEC 27001.