Information security and quality management systems integration: Implementation in an institution specialized in exams organization

Abstract

This research aims to analyze critical factors to support information security and quality management systems integration, based on ISO 27001 and ISO 9001.The literature review raised factors such as: Implantation model, human resources, resource availability, standards issues and standards integration. In a qualitative research conducted with experts’ consultants, the theoretical factors were analyzed. It is important to understand the critical factors to ensure that managers allocate resources appropriately when implementing and maintaining an integrated certified management system.