A Gap Analysis of Compliance with Information Security Measures against ISO/IEC 27001:2022 and Technical Vulnerability Assessment: A Case Study of Companies in Amata City Chonburi Industrial Estate

Abstract

This project aimed to check and assess the compliance of information security measures against ISO/IEC 27001:2022 standards and to examine technical vulnerabilities of operating systems and application programs of companies in Amata City Chonburi Industrial Estate in order to provide guidelines for operations and prepare an information security system to meet the ISO/IEC 27001:2022 standards. The organizing team had the operating procedures and inspection guidelines that met international standards. This resulted in efficiency in inspecting information technology systems and ensuring information technology operations. It was found that the system conformed to information security according to ISO/IEC 27001:2022 standards. The study employed a quality assessment form to collect data from a specific sample group which included those who maintained and used the organizations’ information system. The overall satisfaction level was at a good level, with the total mean at 4.33 and the standard deviation at 0.57.