The critical success factors assessment of ISO 27001 certification in computer organization by test-retest reliability

In the era of fast growing information technology, information security management system (ISMS) assessment has become a top priority of considerations in the operational organization because potential crisis increases when ISMS is vulnerable. The impact of ISMS will also bring revolutionary change on the management of business. The example used in study is the computer center at the Shih Chien University in Taiwan that the ISO27001 certification was done by 2011 and 2012. With 54 hours of ISO27001 auditor course training to the task group (TG), we carried out questionnaires and evaluated the weights of critical success factors (CSFs) for ISO27001 certification by the vote-ranking analytic hierarchy process (VAHP) model. The findings show that top-down ranking involves policy and planning, execution and management, checking and correction, management reviews and provides a heuristic two stages and seven-step procedure for introducing the CSFs of ISO27001 certification. There are no significant differences between 2011 and 2012 ranking results.   Key words: Critical success factor (CSF), ISO27001, vote-ranking analytic hierarchy process (VAHP).