Risk Management & Business Continuity Plan as fundamental activites for an implementation and maintaining of Information Security Management Systems

This paper addresses to the importance of establishing the information security management systems (ISMS) as a foundation for managing an organization’s information security risks. Probability of company’s business success depends on the efficient design and implementation of the ISMS that is influenced by actual company needs and objectives, security requirements, employed business processes and organizational overall business risks. The authors in the paper give their own method of risk analysis design ed on the platform of CRAMM method and MAGERIT method which have been used by British and Spanish governments as the recommended methods for risk analysis coordinating with ISO 27000. Further the authors will give the presentation of the fundamental activities of Business Continuity Plan (BCP) methodology including the main process of operational continuity