Information System
What is Information System?
An integrated set of components for collecting, storing, processing, and communicating information that requires security protection.
Terms that appear alongside information system
Each of these is named in at least one of the same controls as information system. The number is how many controls name both.
- nist 17 shared controls
- cybersecurity 9 shared controls
- policy 9 shared controls
- integrity 8 shared controls
- security officer 7 shared controls
- audit 6 shared controls
- authorisation 6 shared controls
- authentication 6 shared controls
Frameworks that govern information system
What the standards actually require on information system
Requirements naming information system across 6 standards, quoted from the control text.
Designate a person responsible for information system security and make that role known to the staff.
ANSSI-HYG-39 · Designate an Information System Security Officer and Make the Role Known →Except for the Article 3.2 cases and processing made mandatory by normative acts, obtaining and withdrawing subjects' consent to collection and processing is ensured centrally through the Electronic Government Information System (added by Law No.
azerbaijan-law-on-personal-data-2010::Art 8.6 · Article 8.6: consent and withdrawal through the Electronic Government Information System →Where its Risk Assessment shows this to be appropriate, the Licensee makes changes to the Information System only in line with its Information Security Program.
naic-insurance-data-security-model-law-mdl-668::4D(2)(f) · Modify the Information System in accordance with the program →Information systems are placed in separate locations according to importance, use and characteristics, their physical location can be readily identified, and power and communication cables are protected from physical damage and electrical interference.
south-korea-isms-p::2.4.3 · Protection of information systems →Establish secure configuration settings that reflect the most restrictive mode consistent with operational requirements.
SP800-128-SECURE-CONFIG · Secure Configurations of Information Systems →Audit tests and other assurance activities that assess operational systems need a plan agreed in advance by whoever tests and the relevant managers.
iso-27002-2022::8.34 · Protection of information systems during audit testing →Questions people ask about information system
What is Information System?
Why is Information System important for compliance?
Which compliance frameworks address Information System?
Where can I learn more about Information System?
See how Information System applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.