ISO/IEC 27001 is the international standard for information security management. Certification shows customers and partners that security is managed systematically across your organisation.
We help you design and implement an Information Security Management System (ISMS) to the 2022 version of the standard, and prepare you for your certification body audit.
Objectives
- Define ISMS scope, context and information security objectives
- Carry out a risk assessment and risk treatment plan
- Implement the relevant Annex A controls and produce the Statement of Applicability
- Prepare for Stage 1 and Stage 2 certification audits
Methodology
01
Gap analysis
- Assess current practices against ISO/IEC 27001:2022
- Agree scope and implementation roadmap
02
Implement
- Risk assessment and treatment
- Policies, procedures and Statement of Applicability
- Control implementation support and awareness training
03
Assure
- Internal audit and management review
- Support during the certification body audit
Deliverables
Gap analysis report
Risk register and treatment plan
ISMS documentation and policy set
Statement of Applicability
Internal audit report