Integrated implementation of ISO/IEC 27001 and the NIST cybersecurity framework at PICadvanced

• Main Author: Amarante, André Gramata Ribau
• Publication Date: 2022
• Format: Master thesis
• Language: eng
• Source: Repositórios Científicos de Acesso Aberto de Portugal (RCAAP)
• Download full: http://hdl.handle.net/10773/36656
• topic: ISO/IEC 27001; Information security; ISMS; NIST; CSF; SME

ISO/IEC 27001 is an information security standard increasingly present in the current global market. Lately, there has been a rise in the concern of companies with information security, whether it is fueled by the current pandemic, by the increase in attacks to all types of organizations or even by the legislation requirements of various countries. This thesis aims for the planning, execution and evaluation of an ISO/IEC 27001 implementation project at PICadvanced, an organization inserted in the Small and Medium-sized enterprises (SME) category, and founded at ’Incubadora da Universidade de Aveiro’ in 2014, operating in the telecommunications market. The possibility of integration of the NIST cybersecurity framework with the 27001 project will also be studied and implemented. Lastly, since PICadvanced has an ongoing ISO 9001 implementation project (relative to quality management) which may be integrated with the information security system, the 27001 project will include measures in that direction.