Asking about ISO 27001 in Jobdesk

busoh.sensen

Hi,

I want to ask about "ISO 27001". I often look in requirement in a jobdesk, like:
- must have experience in ISO 27001
- Ensure network security comply with IT security requirement (e.g. ISO 270001) or etc...

what it means? I know ISO 270001 about IT security. I've worked in ITSec field in 5 years, including security monitoring, pentest & adm. system storage. But, is that relevant with my experience?


with best regards,

tpatt100

It means you know how to make sure your network, policies, documentation is ISO 27001 compliant.

busoh.sensen

yeah, but like what the implementation ISO 270001 in network or real life?
In my opinion ISO 270001 more managerial than technically (maybe 70 : 30) (cmiiw), like relevan with policies, documentation and other...

if they requirement said "Knowledge of information security standards (e.g., ISO 17799/27002, etc.), and bla bla" i thought every people that have more than 5 years experience in ITSec field must be relevan with that requirement, isn't? even if that people didnt have any security certified yet.

because in my CV, i didnt wrote anything about ISO 270001 & im not taken CISSP yet
should i write "have knowledge in ISO 270001 in some area" to?

drumrolfe

ISO-27000 Specialist G2700 Certification

This certification has topics in 27001/27002 and other ISO standards. I believe there is also a training class to go along with it.