Five Standards Model in Information Security Management Systems and Business Continuity

In the current context of the digital economy, characterized by increasing complexity and challenges in information security management and business continuity, an innovative model for the governance, implementation, maintenance, and continuous improvement of Management Systems (MS) is presented. This model integrates the requirements of international standards ISO 27001 and ISO 22301. Based on a case study, a simple and dynamic documentary structure is proposed, facilitating efficient management and control of the MS. The proposal is supported by specialized committees that operate in a coordinated manner, integrating the areas of Information Technology (IT) and Information Security within the corporate governance framework. The model is flexible and adaptable to various organizational contexts and other Management Systems standards. Its main objective is to achieve significant improvements in document management and MS monitoring, ensuring compliance and integration with the aforementioned regulatory frameworks. This approach also promotes organizational resilience against adversities and crises, aligning the MS strategy with business objectives.