Your security and compliance glossary

All the terms you need to know when you’re trying to get compliance audit ready, fast.

Show filters

What is an Information Security Management System (ISMS)?

An Information Security Management System (ISMS) establishes a systematic approach to managing an organization’s information security. As a documented management system, ISMS provides a set of security controls a company can record in policies, procedures, and other kinds of documents; it may also consist of established processes and technologies that are not documented. The ISO 27001 standard defines which documents must exist at a minimum. 


Implementing an ISMS provides a structured approach to integrating information security into an organization’s business processes. Helping to manage and minimize risks to acceptable levels increases the organization’s resiliency against evolving security threats and ensures the confidentiality, integrity, and availability of organizational and customer information. 


In any implementation, companies need to define and document a risk assessment method and state the protection of specific business assets. The scope of an organization’s ISMS can be as small or as large as is necessary; the ISMS can cover part of an organization, such as a specific function or service or the entire organization.

Additional resources you might like:

Compliance
Event
Ask Me (Almost) Anything: AI & Compliance

What does AI mean for your company’s security compliance program? Join our session on 28 March 9 am AEDT where Matt Cooper, Privacy, Risk and Compliance Manager at Vanta, and Noam Rubin, Sr. Software Engineer at Vanta, will answer (almost) all your questions about AI and compliance.

Compliance
Event
Automating SOC 2 compliance & more

Join Vanta’s 45-minute live product demo on March 12 at 11 am PST where Devin and Natalie will walk you through the Vanta platform and show you how we automate 90% of the work for security and privacy frameworks, and help you move towards a state of continuous compliance.

Compliance
Event
ISO 27001 & SOC 2 Compliance Automation

Join Vanta’s 45-minute live product demo on 13 March at 11 am GMT. Two of our team members will walk you through the platform and answer questions throughout the session.

Get compliant and
build trust, fast.

Two wind turbines on a white background.