Introduction

What is ISO/IEC 27001:2022?

ISO/IEC 27001:2022 is an international standard for managing information security.

It provides a systematic approach to protecting sensitive information by managing people, processes and technology through a structured Information Security Management System (ISMS).

The Background

24th November 2010
By MAMPU under Jabatan Perdana Menteri (Pelaksanaan Pensijilan MS ISO/IEC 27001:2007 Dalam Sektor Awam), all government agencies are required to implement the certification of ISO 27001 (ISMS).

2022
Under the University Key Risk (UKR) No. 2 Comprehensive Information and Communication Technology Policy, ISMS certification is now a required output.

7th February 2024
IIUM ISMS initiative was approved through University Management Committee (UMC) No. 3/2024.

11th March 2025
IIUM ISMS scope was approved during ICT Committee No. 1/2025.

23rd May 2025
IIUM ISMS Kick-Off Meeting
Chaired by: Prof. Emeritus Datuk Dr. Osman Bakar (IIUM Rector)