Information Security Management System Report for Gosford Hospital

This report provides an overview of the Information Security Management System (ISMS) at Gosford Hospital, focusing on how organizational goals align with ISMS principles. It explores the importance of ISMS implementation for managing information security effectively. The report delves into risk management strategies and ethical behavior policies crucial for the hospital's operations. Key elements discussed include the framework for managing security and risk, the alignment of organizational goals with ISMS, and the significance of ethical conduct in information security. The conclusion summarizes the importance of ISMS and related policies for effective information management within the organization, supported by references to relevant research and literature on the topic.

Postgraduate Extended
Diploma in Business
Management

Table of Content
• Introduction
• Information Security Management System
• How organizational goals are aligned with ISMS
• Risk management policy of the organization
• Ethical behaviour policy
• Conclusion
• References

Introduction
Information security management system is policies that control and managing security as
well as risk within systematic manner. This presentation is based on Gosford hospital which
is located at Gosford, Central Coast, NSW, Australia. Respective organisation is providing
several services such as range of medicines, surgical and maternity services to Central coast
region of New South Wales.

Information Security Management
System
Information security management system is framework of policies as well as controls which
manage security and risk in systematic manner across the enterprise information security.
Thus, for them it is important to implement information Security system because it help
them in approaching to information security.

How organizational goals are aligned with
ISMS
Every organisation have some goals and objectives which company want to accomplish and
it is important for them to implement some strategies in effective manner. So they will be
able to accomplish goals and objectives in better manner. For Gosford Hospital,
Information Security Management System will be effective strategy as well as
organisational goals are aligned with ISMS.

Risk management policy of the
organization
Risk management strategy provide structure as well as coherent approach for identifying,
assessing and managing risk. A risk management strategy can be developed and
implemented by even the smallest of groups or projects or built into a complex strategy for
a multi-site international organisation. There are several policies of risk management which
Gosford Hospital have to implement in their working for gaining better outcomes.

Ethical behaviour policy
Ethical behaviour is related to application of moral principles within given
situation. In addition to this, ethical means behaving as per the moral standards
which setted through society in that individual is living. It is important for
Gosford Hospital to implement ethical behaviour policies in their working so
that security related to information will manage in better manner.

Conclusion
After going through overall discussion it has been summarised that,
Information Security Management System is important for an organisation as
it provide assistance in managing information within more effective manner.
Along with this, there are several policies related to risk management and
ethical behaviour which company have to implement in their working for
gaining better advantages in effective manner.

References
• Achmadi, D., Suryanto, Y. and Ramli, K., 2018, May. On developing information
security management system (isms) framework for iso 27001-based data center. In 2018
International Workshop on Big Data and Information Security (IWBIS) (pp. 149-157).
IEEE.
• Haqaf, H. and Koyuncu, M., 2018. Understanding key skills for information security
managers. International Journal of Information Management. 43, pp.165-172.