ISO 27001 is an international standard that focuses on an information security management system (ISMS). It helps organisations manage their information security risks systematically and effectively and is independently verified by a certification body. ISO 27001 is widely recognised and respected and frequently requested by clients as part of the procurement process. Some key things to know about ISO 27001: - It was published by the International Organization for Standardization (ISO). - The current version is ISO 27001:2022, published in October 2022. - It specifies the requirements for establishing, implementing, maintaining and continually improving an ISMS. - The ISMS is a systematic approach to managing sensitive company and customer information so that it remains secure. - It includes aspects like security policy, asset management, access control, encryption, physical and environmental security, and much more. - By implementing ISO 27001, companies can identify, assess, and address their information security risks and assure their clients of their information security practices. - It helps protect intellectual property, financial information, employee details and other valuable data. - Certification to ISO 27001 demonstrates to customers and stakeholders that your organization has robust information security controls. In summary, ISO 27001 is the leading international standard for an ISMS that helps organisations manage information security in a systematic, comprehensive way.

FAQs Archive - Audit and Risk

How much time and Resources will be required?

By admin|2023-10-29T16:54:15+00:00October 29th, 2023|ISO27001 Getting Started|

Implementing an ISO 27001 compliant information security management system (ISMS) requires a significant investment of time, money and resources. It will vary from organisation to organisation depending on a lot of factors including what is already in place, what skills are in-house, how large or complex an organisation is and speed of implementation. Here are some guidelines. Time: The quickest implementation period is 12 -16 weeks. More usually, for a small to medium sized organisations, the implementation process takes 6-12 months on average. For larger companies, [...]

0

What are the Benefits of ISO 27001?

By admin|2023-10-29T15:59:58+00:00October 29th, 2023|ISO27001 Getting Started|

Some of the key benefits that organisations can achieve through ISO 27001 certification are: - Improved information security - ISO 27001 provides a systematic approach to managing information security risks. By implementing the standard's controls, organisations can better protect their data from threats. - Compliance - Certification demonstrates compliance with information security best practices and meets legal/regulatory requirements. This can help avoid fines for non-compliance. - Competitive advantage - Being certified gives organisations a marketing edge and inspires trust in customers. It provides assurance that their [...]

0

What is ISO 27001?

By admin|2023-10-29T15:26:31+00:00October 29th, 2023|ISO27001 Getting Started|

ISO 27001 is an international standard that focuses on an information security management system (ISMS). It helps organisations manage their information security risks systematically and effectively and is independently verified by a certification body. ISO 27001 is widely recognised and respected and frequently requested by clients as part of the procurement process. Some key things to know about ISO 27001: - It was published by the International Organization for Standardization (ISO). - The current version is ISO 27001:2022, published in October 2022. - It specifies the [...]

0

What happens once we are certified?

By admin|2024-06-13T14:25:54+01:00May 29th, 2023|ISO27001 Getting Started, ISO27001 implementation|

Once you have received your certification, you need to continue to undertake the various requirements to meet the standard. One of the key elements of ISO27001 is continuous improvement so you will need to demonstrate that you continue to meet the required standard and improve your ISMS throughout the year. After certification, there will be an annual audit, called surveillance, for two years before your business will be re-certified in year 3.

0

What does the certification process involve?

By admin|2024-06-13T14:26:35+01:00May 29th, 2023|ISO27001 implementation|

We cannot certify you so you will need to select a certification body to check that you have implemented Iso27001. This involves 2 audits, the first call a phase 1 audit, where you are reviewed to see how well you comply with the standard. At this audit you are generally not expected to have everything in place. Then there is a Stage 2 audit where you will receive your certification if successful. For the stage 2 audit you need to be meeting the standard required for [...]

0

Will I need to make lots of changes to get ISO certified?

By admin|2023-05-29T15:56:07+01:00May 29th, 2023|ISO27001 implementation|

Generally what we find is that a business has good practices in place but hasn't documented them. That's where the policies and procedures come into place. Most organisations don't need to make lots of changes to the way they work, just tweaking their good practice.

0

How much work will our business need to do?

By admin|2024-01-08T11:55:36+00:00May 29th, 2023|ISO27001 implementation|

ISO27001 Advantage is a very comprehensive implementation programme but there will still need to be things that the in-house team will need to do including: Attending the weekly group Zoom Calls to stay on track Amend our documents to include specifics about your company Select a certification body Creating a Management Review Committee and attending meetings Creating a Risk Management Committee and attending meetings Attending Internal Audits Providing evidence that the ISMS is working Attending training sessions Sending out our prepared Awareness Campaigns

0

How do I get help and advice during the programme?

By admin|2023-05-29T15:41:37+01:00May 29th, 2023|ISO27001 implementation|

There are weekly group zoom calls for the implementation phase. These set out what you need to do each week and can answer any questions you may have. If you are stuck between calls, you can try the frequently asked questions section on the support platform and if that doesn't help, then you can email the team who will respond as quickly as possible.

0

How long does the programme last?

By admin|2023-05-29T16:03:55+01:00May 29th, 2023|ISO27001 implementation|

The programme is designed to achieve certification in 6 months, but we know that business life can sometimes cause delays so we provide email support for an additional 3 months. Making a support programme which lasts 9 months.

0

Which versions of ISO27001 are you implementing as part of the programme?

By admin|2024-01-08T11:54:14+00:00May 29th, 2023|ISO27001 implementation|

All implementations from June 2023 will be working towards the latest version of ISO27001:2022. ISO27001:2013 is still available to be implemented but then you would need to convert it to ISO27001:2022 so we are saving you a step by helping to implement 2022.

0