Implementation of Information Security Management System (ISMS): a case of Msc it students

ISMS are guidelines to protect and manage the organisations. It is systematic approach to establish, implement, operate, monitor, review, maintain, and improve the information security in organisations. ISMS play an essential role to draw the roadmap of information security. ISMS consist of eleven basic areas, thirty nine objectives, and one hundred thirty three controls. ISO 27001 also adapted Plan Do Check Act (PDCA) cycle model as a guideline of information security processes. This research designed to study the ISMS framework, the implementations, the practices, and the knowledge of ISMS from various organisations. The survey questionnaire is performed toward working adults from Msc IT and the result is evaluated. There are problem statement while working with this research which are not all the organisation is ISMS certified, not all the respondent experience and acknowledge the ISMS practices, not all working adults really concern about ISMS practices, and some ISMS practices is only applicable for specific department. The results from survey are analyst using SPSS version 21 software. From the results identified, Kaiser Meyer Olkin (KMO) test was 0.899 of sampling adequacy. That shows the sufficient of sampling and fitness of data for factorial analysis. The results also identified that 78 percent of total variance shows that considered satisfactory in exploratory factor analysis.