IT systems have become an indispensable infrastructure today carrying Lots of Information Require Robust INFOSEC systems. On the other hand, there are a diversity of serious hazards on information security:  malicious software’s seriously damage information systems, information leaks from the persons concerned, The development and operation of an organization’s InfoSec through appropriate risk assessment against these threats is indispensable to ensure its overall information security. ISO 27001:2013 helps an organization to develop & manage a responsive InfoSec system in an organization.
 
The key concept of InfoSec is to “preserve the confidentiality, integrity and availability of information by applying a risk management process and to give confidence to interested parties that risks are well mitigated “.  ISMS not only focuses on an organization’s soft format information but also on  other forms of information like hard copies & intellectual one To do this, it is important that the ISMS is to be a part of, and integrated with, the organization’s processes and overall management systems  structure.