The object of research - information security management systems of enterprises.
The subject of research is the method of building information security
management systems.
The purpose of the work - information security management systems of
enterprises based on the requirements of the international standard ISO/IEC
27001:2013.
Research methods –analysis of scientific and technical literature, description,
comparison, comparison, formalization, calculation, construction of models, diagrams.
The paper considers the general requirements for information security
management systems, their monitoring and verification, documentation requirements,
management responsibilities, the procedure for conducting an internal audit of the
information security management system of the enterprise.
An example of internal audit of information security management system for a
small organization is considered.