ISO 27001
ISO27001ISMSConsulting
ISO 27001 is a management system, owned by top management, that addresses information security across people, processes and technology. The discipline behind the certificate matters more than the certificate itself: managing risk deliberately, protecting business continuity and earning customer trust. We support you from set-up to the certification audit.
What we do
- 01
Scope and gap analysis
Your current state is compared with the standard's requirements and a roadmap is drawn up.
- 02
Risk assessment
Information assets are identified; risks are scored against threats and vulnerabilities and treated.
- 03
Documentation
Policies, procedures and the Statement of Applicability are tailored to your organisation.
- 04
Implementation and training
Controls are put into practice and staff are trained until the system becomes second nature.
- 05
Internal audit
An independent internal audit before certification, with non-conformities closed out.
- 06
Certification support
Preparation for, and support during, the accredited body's audit.
Who needs it most?
- Electronic communications and infrastructure operators
- Internet service providers
- E-invoicing integrators
- Software, hardware and integrator firms bidding for public tenders
- Exporters seeking authorised economic operator status
- Any organisation holding customer data
More services
Let's review your infrastructure together.
A short call is all it takes to assess where you stand and map out a plan tailored to you.