Guide to ISO 27001: UAE case study

Abstract

ISO/IEC 27001 is the most used standard within the information security field. It is used by organizations that manage information on behalf of others and it is applied to assure the protection of critical client information. In general, applying ISO standards could be costly and require expert people. This paper introduces a survey study about using the standards in the UAE and details three case studies on ISO 27001 implementation: One case study follows the ISO 27001 framework, and it is expanded by using additional management processes. The second case study integrates both ISO 27001 and ISO 20000 standards. The final case study details the certification process for ISO 27001 only. This research paper shows that the use of ISO 27001 in this region of the world is quite promising and puts the guidelines for any organization interested to apply this standard..