Information security management is the foundation for the security of information systems. Today, every organization has its own computer system. Information security includes a number of activities to ensure the security of information systems and infrastructure. However, most organizations can not conduct these activities and ensure the safety of their own information systems. Most organizations want to know how to secure a system?

One possible solution is to implement a security management system (ISMS). Security management is the foundation for building secure and reliable information systems. EU regulations frequently set formal requirements for the implementation of systems for managing information security. In particular this applies to financial institutions and government bodies and business entities. Implementation and operation of ISMS is a formal process and there are various standards for more uniform systems. The most famous, and globally accepted, are ISO 17799 or BS 7799-2 that are proved to be most effective for the establishment of ISMS.

Of course, every organization needs to conduct a formal penetration test to determine the actual state of security for the information system. Penetration testing is a method that enables clients to verify the true state of their information system security. The person performing the penetration test acts as a real attacker and tries to bypass the security mechanisms of the targeted information system. Nobium has over 15 years of experience in conducting penetration tests and implementation of information security management.