The Critical Success Factors in Telecommunication Industry Certification ISO27001

• Main Authors: SU, SHIH-HAO, 蘇世豪
• Other Authors: Dr. CHIU, KUANG-HUI
• Format: Others
• Language: zh-TW
• Published: 2010
• Online Access: http://ndltd.ncl.edu.tw/handle/98417461750364445994

碩士 === 國立臺北大學 === 企業管理學系碩士在職專班 === 98 === The critical success factors for telecommunication industry to imply ISO 27001 is depending on how fast the digitalization development, because of their own reasons, enterprises do not imply the advanced information technology. Most organizations build up their information security system after information issue happened. In fact, they should concern it before. If any information security incident happened on any of the telecommunications company, the impact not only on its business operations, but it costs on its company reputation. Indeed, the government should pay more concern on information security issues, especially, we should focus on ISO 27001 on telecommunication industry. ISO 27001 has many advantages, such as organization identified and management the risk of using IT equipments. With no doubt, it is the greatest information security protection mechanisms for any organizations. Therefore, our study will focus on the experience of complying ISO 27001 on the telecommunication industry, and to organizes the successful factors. Furthermore, we hope to share any successful experiences to those companies which have not implied ISO 27001. Our study will focus on a telecommunication company in Taiwan which has already implied ISO27001. We will use questionnaire and personal interview to get our raw data and organize with our study. Delphi method will be used for study the difference between those key factors. At the end, we found the important aspects for implying ISO27001 are attitude of the company, resources of usage, specialist to in charge and the organization consultants and we will share our found to the top management at organization. During the process of implying information security standards, the organization should pay highly support. Setting up the specialized unit and hiring consultant are key-points to successful imply the ISO27001.