Standards and compliance in IT projects: integrating ISO 27001/22301/9001 into project management

Authors

  • Ester Bradač

DOI:

https://doi.org/10.31449/upinf.258

Keywords:

information security, ISO standards, IT projects, quality, resilience, project management

Abstract

The article discusses the integration of ISO 27001, ISO 22301, and ISO 9001 standards into IT project management. It highlights that the simultaneous application of these standards enhances project efficiency, compliance, security, and resilience. Based on a literature review and practical challenges, a model is proposed that incorporates the standards into all phases of the project lifecycle. This integration supports better risk management, higher execution quality, and increased stakeholder trust, making a systematic approach to standard integration a key development direction for managing complex IT projects.

Author Biography

Ester Bradač

Ester Bradač holds a master's degree from the University of Maribor, majoring in Organization and Management of Information Systems. She is involved in managing IT projects in an international organization. She is also the administrator of the organizational standard for business continuity 22301:2019 and an internal auditor for several standards. She is also actively involved in the field of change management, where she participates in and directs projects in this area within the organization.

Published

2025-08-12

How to Cite

[1]
Bradač, E. 2025. Standards and compliance in IT projects: integrating ISO 27001/22301/9001 into project management. Applied Informatics. (Aug. 2025). DOI:https://doi.org/10.31449/upinf.258.

Issue

Section

Professional papers