ISO 27001 is closely associated with ISO 27002, which is a code of practice for Information Security Management.
ISO 27002 (formerly ISO 17799) provides a common and proven basis for developing high organisational security standards and effective security management practice.
ISO 27001 is the actual standard to which certification is measured. It sets out the requirements for an Information Security Management System (ISMS). An ISMS is a systematic approach to managing the security of sensitive information - encompassing people, processes, IT systems and policy.
ISO 27001 is designed to identify, manage and reduce the range of threats to which your information is regularly subjected.
THE BENEFITS OF IMPLEMENTING ISO 27001
A valuable framework for resolving security issues
Enhancement of client confidence & perception of your organisation
Enhancement of business partners’ confidence & perception of your organisation
Provides confidence that you have managed risk in your own security implementation
Enhancement of security awareness within an organisation
Assists in the development of best practice
Can often be a deciding differentiator between competing organisations
HOW DO YOU START TO IMPLEMENT ISO 27001 WHAT IS INVOLVED?
QIC will rationalise the results of the gap analysis and the risk assessment to develop a comprehensive Security Improvement Programme. Our consultants will help you to implement the required security improvements. Our extensive experience means that we are able provide informed and practical solutions to issues that may arise in each area of the Standard.
ASSESSMENT TO ISO 27001
Our consultants will perform a comprehensive assessment of your existing security processes and compare them to those required by the ISO 27001 standard. A detailed report will then be generated, identifying the actions required to attain compliance.
WHY CHOOSE QIC FOR YOUR ASSESSMENT?
QIC will help you evaluate the levels of information security risk involved in your business processes. Consequently, a risk treatment plan can be generated.
