The Computer Law and management of information security - A perspective based on the ISO27001 standard

Abstract

This article seeks to provide information about the existence and
various disciplines of Information Technology Law and to create
awareness about the position to be taken by the various economic
players in the information age to ensure an adequate information
security policy that, in the absence of a national regulation on the
matter, has to be based on international standards, comparative
law and the autonomy of will. The methodology employed to
explain the various areas of impact is that of the ISO 27001 standard
in its domain about Compliance which includes: The protection
of personal data, the contracting of IT goods and computer data
transmission; labor law and provision of services, regarding the
regulation of technological aspects; electronic commerce services;
intellectual property rights, and the treatment of IT incidents.