Implementing an Information Security Management System: Security Management Based on ISO 27001 Guidelines

© Abhishek Chopra, Mukund Chaudhary 2020

A. Chopra, M. ChaudharyImplementing an Information Security Management Systemhttps://doi.org/10.1007/978-1-4842-5413-4_10

10. Continual Improvement

Abhishek Chopra¹  and Mukund Chaudhary²

(1)

Faridabad, Haryana, India

(2)

Noida, India

 

"Continuous improvement is the only cultural value that could unify an organization as large and diverse as ours.”

—Anonymous

This final chapter discusses continual improvement. Is continual improvement needed when you have implemented the ISO 27001 standard controls and have been audited/certified by an external certifying body? The fact is, your duty is not over once you are certified. Many organizations don’t focus on further improvements or stop adding to the scope areas that ...