Information Security Management System Transition Strategy From ISO/IEC 27001:2013 To ISO/IEC 27001:2022 At PT PKT
Abstract
ISO issued the ISO/IEC 27001:2022 standard in October 2022 to update ISO/IEC 27001:2013 with the main objective of improving the relevance of the standard to the current state of information security, ensuring simpler and more effective controls, and facilitating better risk handling. The transition period given is for 3 years since the latest standard was published in October 2022, ISO provides a transition period until October 31, 2025 so that organizations can adjust their information security management systems to the latest version. After that date, ISO/IEC 27001:2013 certification is declared invalid, and all organizations that want to maintain their certification must comply with the latest ISO/IEC 27001:2022 standard.The proposed solution from this research is thirteen action plans to be implemented by PT PKT to close the identified gaps and to meet all the requirements in ISO/IEC 27001:2022. The action plans are grouped according to Plan-Do-Check-Action (PDCA) cycle adopted by ISO as the basis for consideration in preparing the implementation time frame. The results of the research showed that PT PKT could make a transition in eight months. The implementation of proposed action plan starts in July 2024 and will completed in February 2025, which means that PT PKT can successfully transition ISO/IEC 27001:2022 before the due date.Downloads
Copyright (c) 2026 Puguh Prasetyo, Gatot Yudoko
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
An author who publishes in the EKOMBIS REVIEW: Jurnal Ilmiah Ekonomi dan Bisnis agrees to the following terms:
Author retains the copyright and grants the journal the right of first publication of the work simultaneously licensed under the Creative Commons Attribution-ShareAlike 4.0 License that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal
Submission of a manuscript implies that the submitted work has not been published before (except as part of a thesis or report, or abstract); that it is not under consideration for publication elsewhere; that its publication has been approved by all co-authors. If and when the manuscript is accepted for publication, the author(s) still hold the copyright and retain publishing rights without restrictions. For the new invention, authors are suggested to manage its patent before published. The license type is CC-BY-SA 4.0.
EKOMBIS REVIEW: Jurnal Ilmiah Ekonomi dan Bisnis is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
