ISO/IEC JTC 1/SC 27/WG 1 N 1032 ISO/IEC JTC 1/SC 27/WG 1 Information security management systems Convenorship: BSI (United Kingdom) Document type: Other document (Defined) Title: DRAFT ISO IUMSS Handbook edition 2 - 31 July 2017 version 22 Status: This document is circulated for information and consideration at the WG 1 meeting in Berlin, Germany - 30th Oct to 3rd Nov 2017. NOTE: WG 1 feedback on this document will be sent to JTCG MSS after the Berlin meeting. Date of document: 2017-09-03 Source: SC 27 JTCG Liaison Officer (Ralph Eckmaier) Expected action: INFO Email of convenor: edwardj7@msn.com Committee URL: http://isotc.iso.org/livelink/livelink/open/jtc1sc27wg1 ISO/TMBG/JTCG N 481 ISO/TMBG/JTCG Joint technical Coordination Group on MSS (TAG 13) Email of convenor: deann.desai@gatech.edu Convenorship: ANSI (United States) DRAFT ISO IUMSS Handbook edition 2 - 31 July 2017 vers 2 Document type: Other draft Date of document: 2017-08-01 Expected action: COMM Action due date: 2017-09-17 No. of pages: 111 Background: This is the Integrated Handbook for comment by your committees. Please be sure to provide your comments by Sunday the 17th of September. Committee URL: http://isotc.iso.org/livelink/livelink/open/tmbgjtcg 2  The Integrated Use of Management  Systems Standards Draft – vers 2  3  Second Edition   1  4  5  6  7  8  9  10  An ISO TMB/JTCG Taskforce Project number 005    July 31, 2017    Insert ‐ ISO IUMSS Graphic       11      Contents  12  13  Preface and acknowledgement .............................................................................................................. 3  14  Foreword ................................................................................................................................................. 4  15  Introduction ............................................................................................................................................ 5  16  Overview ............................................................................................................................................. 5  17  General ................................................................................................................................................ 6  18  External and factors in context of the organization ........................................................................... 6  19  External factors ............................................................................................................................... 6  20  Internal factors ................................................................................................................................ 7  21  Benchmarking and Contextualization the IUMSS Handbook ............................................................. 9  22  Standardization of ISO Management Systems Standards development and IUMSS ....................... 10  23  Layout of this book............................................................................................................................ 17  24  Chapter Layout .................................................................................................................................. 18  25  How to use this handbook? .............................................................................................................. 19  26  Chapter 1: Management system........................................................................................................... 20  27  What is a management system? ....................................................................................................... 21  28  Organizational context, risks and opportunities ............................................................................... 24  29  Components of a Management System ........................................................................................... 26  30  Goals and objectives ..................................................................................................................... 26  31  Operating environment and competition ..................................................................................... 29  32  Interested parties .......................................................................................................................... 31  33  Organizational structure and resources ....