INDUSTRY PERSPECTIVE / PUNE & INDIA
IT & Software management systems.
Software and IT service organisations manage information, service delivery, customer requirements, suppliers and operational change. Management systems can help formalise these activities.
01 / Operational context
Considerations for it & software.
A management system should be designed around real work, relevant risks, stakeholder needs and applicable requirements—not adopted as a collection of generic documents.
COMMON AREAS TO REVIEW
- Information security risks and controls
- service and quality processes
- access and asset management
- incident, change and continuity arrangements.
02 / Framework to explore
ISO/IEC 27001 as a starting point.
The framework shown here is a possible starting point for discussion, not a statement that it is compulsory or suitable for every organisation in this sector. Confirm the applicable standard edition, scope, customer requirements and regulatory context before deciding.
PLAN THE RIGHT SCOPE
Make the framework fit the operation.
Discuss the processes, customers and requirements relevant to your organisation.