Establishing Security
Controls
Risk Management
Legal and Regulatory
Compliance
Continuous Improvement
Purpose of ISO
Certification
Establish Information Security
Management System (ISMS)
Protect Information Assets
Manage Information
Security Risks
Ensure Legal and
Regulatory Compliance
Enhance Trust
and Confidence
Achieve Business
Objectives