In the framework of the EU-funded actions for support to SMEs in standardisation by Small Business Standards, the European DIGITAL SME Alliance developed and now upgraded an SME Guide for the implementation of ISO/IEC 27001 on information security management.
The main goal of the Guide on information security management is to support SMEs in understanding and applying ISO/IEC 27001 for information security management systems. With the publication of the 2022 revision of the standard, an update was necessary to reflect the new requirements and adapt the content to the European cybersecurity landscape. The new edition of the Guide continues to provide SMEs with a practical and accessible tool to strengthen their information security management in line with international standards.
This publication is a result of the efforts of the DIGITAL SME “WG27K” working group, which brought together experts familiar with standardization issues for information security management systems. These activities were coordinated by Guido Sabatini and chaired by Fabio Guasconi. The recent updates have been led by Davide Iaccarino, Cybersecurity & Data Project Manager at the European DIGITAL SME Alliance, in collaboration with Davide Giribaldi, a cybersecurity and standardisation expert and one of the original co-authors of the guide. Contributions to the Guide were provided by experts with strong knowledge of information security and standardisation, including Georgia Papadopoulou, George I. Sharkov, David Bulavrishvili, Sergio Oteiza, Holger Berens, Ermal Çifligu, Sebastiano Toffaletti, Nanuli Chkhaidze, Yuri V. Metchev, Thorsten Dombach, and Alexander Häußler.
