What is EN ISO 8528-5:2019 ?

EN ISO 8528-5:2019 is a technical standard that provides guidelines and requirements for establishing, implementing, maintaining, and continually improving an information security management system (ISMS) within the context of an organization. The standard is based on the Plan-Do-Check-Act (PDCA) cycle and follows the high-level structure defined by Annex SL.

The main purpose of EN ISO 8528-5:2019 is to help organizations protect their sensitive information from various internal and external threats. By implementing the standard's recommendations and requirements, organizations can establish a systematic approach to managing information security risks and achieve a higher level of confidence in their ability to effectively respond to incidents and prevent data breaches.

The key elements of EN ISO 8528-5:2019 include:

The establishment of a management system that includes policies, objectives, and procedures for managing information security risks.

The identification and assessment of information security risks and the implementation of controls to mitigate those risks.

The establishment of a monitoring and review process to continuously monitor and improve the effectiveness of the management system.

The implementation of regular security reviews and risk assessments to ensure the system remains effective and meets the changing needs of the organization.

EN ISO 9004:2019 is an international standard that provides guidance for organizations on how to achieve sustained success and continual improvement. It is part of the ISO 9000 family, which sets the standards for quality management systems.

The main purpose of EN ISO 9004:2019 is to help organizations go beyond the requirements of ISO 9001 and focus on achieving long-term success. It provides guidelines on how to enhance organizational performance, efficiency, and effectiveness in order to meet the needs and expectations of customers and other stakeholders.

The main principles of EN ISO 9004:2019 include:

The focus on customer satisfaction and the satisfaction of other stakeholders.

The importance of continuous improvement and the need for ongoing learning and adaptation.

The need for leadership and management to drive improvements and ensure the success of the organization.

The importance of communication and collaboration in achieving success and meeting the needs of stakeholders.