Implementation of ISO/IEC 27001 Information Security Management System in IT department

In Information Technologies, parallel to increase of internet usage, all services are started to offer online. It made information security more important and caused organizations to take precautions in their IT security.All managerial and technical precautions are standardized for organizations needed an information security conscious with ISO/IEC 27001 Information Security Management System started in early 1995?s. Later, this standart also has been accepted by goverments as a prerequisite for some IT organizations.Primarily, Information Security Management System is applied to IT departments where all data processed, stored and managed .The purpose of this study can be expressed as to prepare a Turkish guideline for IT managers who eager to establish a standart based on ISO/IEC 27001. Nowadays, resources in that field are scarce in turkish language and related information can only be reached via consulting companies by paying. With this study, it is aimed to decrease time and resource requirements and all steps needs to be taken for establishing and managing an Information Security Management System is explained in order.While searching for an answer to all aforementioned problems in addition to literature survey, participated in various trainings and workshops, and visited related consulting companies for collecting necessary data.