ISO 27001 Implementation

Is your organisation’s information as secure and well managed as it should be?

In this day and age security of information is paramount whether the data is personal, financial or intellectual property. Organisations should protect themselves against threats that are experienced in their business activity. This is why our ISO 27001 implementation service is tailored to meet the individual requirements of our clients. As we are locally based your first consultation is provided free of any charge and we never ask you to pay our expenses!

What is ISO 27001?

ISO 27001 determines the requirements for an Information Security Management System (ISMS). An ISMS is a systematic approach to managing the security of sensitive information - encompassing people, processes, IT systems and policy. ISO 27001 is designed to identify, manage and reduce the range of threats to which your information is regularly subjected involving:

• Security Policy

• Organisation of information security

• Asset management

• Human resources security

• Physical and environmental security

• Communications and operations management

• Access control

• Information systems acquisition, development and maintenance

• Information security incident management

• Business continuity management

• Compliance 
  

What are the benefits?

By implementing ISO27001 an organisation will be working to a globally recognised standard that is considered an exemplar of information security best practice in 150 countries. ISO 27001 offers an excellent framework for developing or enhancing your organisation’s security and effective security management practice to provide greater confidence in dealings with other organisations. Certification provides many tangible benefits:

• Is often a deciding differentiator between competing organisations

• Enhances your clients’ and business partners’ confidence and perception of your organisation

• Focuses your organisation on financial gains through cost savings and business growth

• Strengthens management controls on information critical to business processes

• Provides confidence that you have professionally managed risk in your own security procedures

• Enhances security awareness within your organisation

• Assists in the development of best practice

• Prevents commercial loss through theft, denial of service or espionage

• Enables your organisation to conduct sensitive transactions securely

• Strengthens your organisation’s business continuity planning
  

How Point 2 Point Consulting can help

We can confidently assist you with compliance, implementation and training. We understand the issues local organisations face and are always available in person to support our clients – we are not just at the end of a telephone, we are local to your organisation.

We will guide you through the complete project, from beginning to end undertaking as much of the implementation work as you require.

1. SCOPE
   Assist you to identify the business processes which are vital to your organisation. Thus creating a solid foundation for building an effective ISMS.
2. GAP ANALYSIS
   Undertake an assessment of your existing security processes and compare them to those required by ISO 27001. An audit report will be presented identifying the proposed actions required.
3. RISK ASSESSMENT
   We will help you evaluate the levels of information security risk involved in your business processes. Consequently, a risk treatment plan can be generated.
4. GAINING CERTIFICATION
   We will take you through the whole process of gaining certification. We will undertake a final assessment of your ISMS and then act on your behalf on the day of the certification audit to ensure a successful outcome.
5. POST CERTIFICATION
   On an ongoing basis we will assist you to manage and co-ordinate your ISMS. We will train your ISMS champion to undertake regular reviews to ensure your organisation gains the most benefit in your day-to-day operations.
   

As we are locally based your first consultation is provided free of any charge and we never ask you to pay our expenses!