Information System
What is Information System?
An integrated set of components for collecting, storing, processing, and communicating information that requires security protection.
Terms that appear alongside information system
Each of these is named in at least one of the same controls as information system. The number is how many controls name both.
- nist 17 shared controls
- cybersecurity 9 shared controls
- policy 9 shared controls
- integrity 8 shared controls
- security officer 7 shared controls
- audit 6 shared controls
- authorisation 6 shared controls
- authentication 6 shared controls
Frameworks that govern information system
What the standards actually require on information system
Requirements naming information system across 6 standards, quoted from the control text.
Designate a person responsible for information system security and make that role known to the staff.
ANSSI-HYG-39 · Designate an Information System Security Officer and Make the Role Known →Establish secure configuration settings that reflect the most restrictive mode consistent with operational requirements.
SP800-128-SECURE-CONFIG · Secure Configurations of Information Systems →Requires audit tests and other assurance activities that assess operational systems to be planned and agreed in advance between the tester and the appropriate management.
iso-27002-2022::8.34 · Protection of information systems during audit testing →The first of the ten minimum measure categories requires both a method for analysing risk and the security policy set that the analysis feeds.
nis2-directive::Art.21.2.a · Policies on risk analysis and on information system security →Develop the Information System Contingency Plan (ISCP) per NIST SP 800-34 Rev 1 Section 3.5 + Appendix A (Sample ISCP Template). ISCP must include (a) Supporting Information per Section 3.5.1: introduction + concept of operations + system description and archi...
NISTSP34-4 · Information System Contingency Plan (ISCP) Development →Sets requirements for the creation and operation of personal data information systems.
AZ-DPA-11 · Article 11 - Characteristics of personal data information systems →Questions people ask about information system
What is Information System?
Why is Information System important for compliance?
Which compliance frameworks address Information System?
Where can I learn more about Information System?
See how Information System applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.