MAIN CONTENTS OF ISO/IEC 27001:2022

ORGANIZATIONAL ENVIRONMENT:

Requires organizations to fully understand and evaluate internal and external factors related to their information security management system, including the industry in which the organization is located, the nature of its business, legal and regulatory requirements, and the technical environment, in order to determine the scope and boundaries of the ISMS and ensure that it is consistent with the strategic direction and business objectives of the organization.

LEADERSHIP:

Emphasizes the key role of top management in information security management. Top management needs to demonstrate leadership and commitment to information security, formulate information security policies, ensure that they are appropriate for the organization's purpose, and integrate information security requirements into the organization's processes and activities. At the same time, information security-related responsibilities and authorities should be assigned, and the performance of the ISMS should be reported to top management.

PLANNING:

The organization should plan how to respond to information security risks and opportunities, including conducting a comprehensive information security risk assessment, identifying threats to information assets, existing vulnerabilities and their potential impacts, and formulating corresponding information security risk disposal plans based on the results of risk assessments, determining the priority of risk disposal, and selecting appropriate risk disposal measures. In addition, it is necessary to establish measurable information security goals at relevant functions and levels, and plan their implementation paths to ensure that the information security goals are consistent with the information security policy and are achievable.

SUPPORT:

The organization should ensure that the necessary resources, including financial resources, human resources and technical resources, are provided for the establishment, implementation, maintenance and improvement of the ISMS. Determine the necessary capabilities of staff who affect information security performance, and enable them to have the corresponding information security awareness and skills through training, education or experience sharing. At the same time, it is necessary to improve the awareness of all employees on the importance of information security and ensure that they understand the relevant requirements of the ISMS and their responsibilities in information security. In addition, it is necessary to establish an effective communication mechanism to ensure effective communication of information security matters within the organization and with external stakeholders, and control the documented information required by the ISMS to ensure its suitability, adequacy and effectiveness, and prevent the loss or improper use of documents.

OPERATION:

Implement information security control measures in accordance with the planned risk treatment plan, manage the impact of changes on information security, and conduct regular and comprehensive information security risk assessments to ensure the effectiveness and continued suitability of the ISMS.

PERFORMANCE EVALUATION:

The organization needs to establish performance indicators to measure the effectiveness of the ISMS, such as the number of information security incidents, trends in information security performance, and employee feedback on information security awareness. Through internal audits, external audits, and management reviews, the performance of the ISMS is monitored, measured, analyzed, and evaluated to ensure that it meets the requirements of the standard and achieves the expected performance goals. Based on the evaluation results, opportunities for continuous improvement are identified to continuously improve the performance of the ISMS and the organization's information security management capabilities.

IMPROVEMENT:

When non-compliance with ISMS requirements occurs, the organization should take corrective measures in a timely manner, control and correct the non-compliance, analyze the causes, and take measures to prevent it from happening again. At the same time, the effectiveness of corrective measures should be continuously monitored and evaluated, and necessary changes should be made to the ISMS based on the evaluation results to ensure its continued effectiveness and adaptability.

Implementation of SETsafe | SETfuse

ESTABLISHING A SOUND MANAGEMENT SYSTEM:

SETsafe | SETfuse has passed multiple quality management system certifications such as IATF 16949, ISO 9001, as well as ISO 14001 environmental management system, ISO 45001 occupational health and safety management system, ISO 50001 energy management system and other certifications. The establishment and operation of these systems reflect the company's emphasis on and standardization of management, and lay a good foundation and management ideas for the construction of its information security management system, which will help to better integrate and coordinate various management activities and improve the overall management level.

DIGITAL MANAGEMENT HELPS INFORMATION SECURITY:

Adopting internationally renowned industrial-grade software management companies, with OA as the core, to connect data with major business systems to achieve paperless office. This not only improves work efficiency, but also strengthens the management and control of information security to a certain extent. Through the digital management system, we can better control the access, storage, transmission and other aspects of information, ensure the security and confidentiality of information, and reduce the risk of information leakage. At the same time, digital management is also conducive to the centralized management and backup of information, improve the availability and reliability of information, and provide technical support for the effective operation of the information security management system.

INFORMATION SECURITY FEATURES OF PRODUCTS:

As a professional supplier of circuit protection components and related circuit safety solutions, SETsafe | SETfuse's products are mainly circuit protection components. Although these products themselves are not directly designed for information security, in their application process, such as in the fields of communications, power supply, lighting, etc., circuit protection components can indirectly provide protection for the information security of equipment. For example, ensure the stable operation of the circuit to prevent the equipment from not working properly due to circuit failure, thereby avoiding information security issues that may be caused by equipment failure. In addition, the company has also participated in the formulation and revision of a number of Chinese and international standards for circuit protection components, which helps it to timely understand and grasp the latest technological developments and information security requirements in the industry, integrate relevant information into the product design and production process, and improve the information security performance of the product.

FOCUS ON INTELLECTUAL PROPERTY PROTECTION:

Passed the intellectual property management system certification (GB/T 29490), indicating that the company attaches importance to the protection and management of intellectual property. This echoes the information security requirements in the information security management system, because intellectual property is one of the important information assets of the organization, and its protection is also an important part of information security management. Through the coordinated operation of an effective intellectual property management system and an information security management system, the company's intellectual property can be better protected, technology leakage and infringement can be prevented, and the company's core competitiveness can be maintained.

RISK MANAGEMENT AWARENESS:

In the production and operation process, SETsafe | SETfuse attaches great importance to risk management and adopts a variety of risk warning mechanisms. This risk awareness can also be extended to the field of information security, applying this risk thinking to the construction of the information security management system, actively identifying and evaluating information security risks, and taking corresponding control measures to reduce the impact of risks.

For more information, please contact: sales@SETfuse.com

Thank you for your interest in SETsafe | SETfuse.