Implementing an ISMS for Operators of Essential Services (OES): Improving the information security posture

The high amount of information and the low-security level within critical processes, put at risk the productivity of the organizations and the security of the processed information managed by Operators of Essential Services (electricity, oil and gas, distribution system operators, industrial system operators, entities from the air and railway transportation sector, health care, drinking water suppliers). Measures to improve your security level are needed to combat threats. Organizational and technical measures need to be employed to establish a good level of security. For systems to remain secure, however, security posture must be evaluated and improved continuously. Establishing such process that will support these ongoing improvements is essential in order to maintain your security level. Experience has shown that implementing Information Security Management System (ISMS) according to internationally recognizable information security standard ISO 27001 is a very good approach to accomplish that mission. Companies obtaining the ISO/IEC 27001 certification have indirect proof that they meet the mandatory regulatory requirements imposed by the legal system under which they perform their activities. The increasing trend is for them to decide to implement an Information Security Management System (ISMS) due to industry-specific requirements or in order to build the trust of their customers.