It describes the process of ISMS specification and design from inception to the production of implementation project plans, covering the preparation and planning activities prior to the actual implementation, and taking in key elements such as: ISO/IEC 27003 guides the design of an ISO/IEC 27001-compliant ISMS, leading up to the initiation of an ISMS project.
ISO/IEC 27003 provides implementation guidance to help those implementing the ISO27k standards. Standard Title: ISO/IEC 27003:2010 Information technology - Security techniques - Information security management system implementation guidance
