admin, Author at Audit and Risk

ISO27001 – Control 5.1 – Policies for Information Security

By admin|2024-02-21T15:08:20+00:00February 21st, 2024|ISO 27001 Controls|

ISO27001 - Control 5.1 - Policies for Information Security Control Information security policy and topic-specific policies should be defined, approved by management, published, communicated to and acknowledged by relevant personnel and relevant interested parties, and reviewed at planned intervals and if significant changes occur. What this means This control is all about the importance of having robust security information policies in place and reviewing them regularly. Information security policies provide the foundation for managing risks and protecting information assets and there are certain policies required by [...]

0

Bring Your Own Device (BYOD) – The risks and rewards

By admin|2024-02-23T09:48:44+00:00January 23rd, 2024|Cyber Security, Information Security|

Bring Your Own Device (BYOD) is a popular policy where employees use personal devices for work. This typically means using personal smartphones or laptops to access company systems and data. While convenient, BYOD introduces cybersecurity risks that organisations must address. Failure to secure personal devices puts sensitive company information at risk. When employees access internal systems on insecure devices outside the corporate network, businesses lose control of that data. Without proper BYOD policies and controls, unauthorised users could access sensitive information if a device is lost, [...]

0

How to Choose an ISO27001 Certification Body

By admin|2024-01-03T12:48:35+00:00January 3rd, 2024|ISO27001 Certification|

Choosing the Right ISO 27001 Certification Body Gaining ISO 27001 certification evidences that your organisation has implemented a robust information security management system (ISMS). A key decision to make on your ISO 27001 journey is selecting which certification body to work with for the formal certification process. Here are some tips on choosing the best ISO 27001 certification body for your needs: Make Sure They Are UKAS Accredited The United Kingdom Accreditation Service (UKAS) provides oversight to certification bodies operating in the UK. Confirm that potential [...]

0

What is the purpose of Internal Audit for ISO27001 Certification?

By admin|2023-12-07T17:09:27+00:00December 7th, 2023|Internal Audit, ISO27001 Certification, ISO27001 Implementation|

What is the purpose of Internal Audit for ISO27001 Certification? The Key Role of Internal Audits in ISO 27001 Compliance Obtaining ISO 27001 certification provides numerous benefits for organisations, demonstrating that your organisations is serious about information security. To achieve certification, an extensive information security management system (ISMS) needs to be implemented and rigorously maintained. A crucial component for maintaining an effective ISMS as required by ISO 27001 is conducting regular comprehensive internal audits. Internal audits examine all aspects of your security controls, policies, and procedures [...]

0

ISO 27001 – Risk Assessment Requirements

By admin|2023-11-23T12:18:47+00:00November 23rd, 2023|Risk Assessment|

ISO27001 - Risk Assessment Requirements Managing Risk: A Core Element of ISO 27001 Certification For organisations seeking ISO 27001 certification, implementing a comprehensive risk management program is essential for obtaining the certification. ISO 27001 requires a formal risk assessment policy and procedure to be in place. This can be a bit intimidating when you haven't done any formal risk management practices before. But remember that you are managing risk as a business owner or department head all the time. You may not see it that way [...]

0

Is Getting ISO 27001 Certification Difficult?

By admin|2024-02-23T09:57:10+00:00November 19th, 2023|ISO27001 Certification, ISO27001 Implementation|

Is Getting ISO 27001 Certification Difficult? Introduction: ISO 27001 is the most widely recognised standard for information security management systems (ISMS). It provides a framework for organisations to manage their information security risks. Many companies now seek ISO 27001 certification to demonstrate their commitment to security. But is getting certified difficult? Let's explore some of the main concerns. The Implementation Process Implementing the controls and processes required by ISO 27001 can seem daunting initially. It requires defining a formal information security policy, classifying assets and recording [...]

0

Is ISO27001 better than ISO9001?

By admin|2024-02-23T10:00:27+00:00November 15th, 2023|ISO27001 Certification, ISO27001 Implementation, ISO9001|

Is ISO27001 better than ISO9001? ISO 27001 and ISO 9001 are two of the most widely used ISO management standards globally. But what exactly do they focus on and how do they differ? Here we will explain the unique objectives and scopes of ISO 27001 and ISO 9001 to help you understand which standard is most relevant for your organisation. ISO 27001 - Information Security Management ISO 27001 is specifically focused on information security. It has requirements for establishing, implementing, maintaining and continually improving an Information [...]

0

Who needs to be ISO27001 certified?

By admin|2024-02-23T13:03:20+00:00November 12th, 2023|ISO27001 Certification, ISO27001 Implementation|

ISO 27001 is an internationally recognised standard for information security management systems (ISMS). It provides a framework for organisations to manage their information security risks and protect sensitive data. Many companies are now seeking ISO 27001 certification to demonstrate their commitment to security and gain a competitive edge. Companies which are handling lots of personal information or confidential business information on behalf of their clients can demonstrate good security practices by obtaining ISO 27001 certification. This would include companies such as those working in market research, [...]

0

What is ISO27001 in the UK?

By admin|2024-02-23T13:12:18+00:00November 9th, 2023|ISO27001 Implementation|

What is ISO27001 in the UK? ISO27001 is the international standard (ISO) for Information Security Management Systems (ISMS). ISO 27001 has become one of the most widely adopted international standards for managing information security. It outlines the requirements for establishing, implementing, maintaining and continually improving an Information Security Management System (ISMS). An Information Security Management System does what is says on the tin. It is designed to protect business information and ensure the Confidentiality, Integrity and Availability of business information. Confidentiality, Integrity and Availability are the [...]

0

Why are internal Audits important for ISO27001 Certification?

By admin|2024-02-23T13:07:02+00:00June 12th, 2023|Internal Audit, ISO27001 Certification, ISO27001 Implementation|

Why are internal Audits important for ISO27001 Certification? Internal audits are important for evaluating an organisation's compliance with ISO 27001 requirements and ensuring that the established security controls are effectively implemented. The internal audits happen throughout the year between surveillance audits with the external certification body. The aim on the internal audits is to ensure that your information security management system continues to work effectively and in line with the ISO27001 Standard. It’s a good idea to have the internal audits spread throughout the year as [...]

0

About admin