ISO Certification
ISO/IEC 27001 and related management-system certifications — an information security management system that is genuinely used, not written for the audit.
ما تحصلون عليه في النهاية
- ISMS scope
- Statement of applicability
- Risk treatment plan
- Internal audit report
How the engagement runs
Each phase ends with something you can review before the next one starts.
المرحلة 1: Context & scope
The organisation, its interested parties and the ISMS scope defined.
You leave with
An agreed ISMS scope.
المرحلة 2: Risk assessment
Information security risks assessed and treatment chosen.
You leave with
Risk register and statement of applicability.
المرحلة 3: Implementation
Controls, policies and the management system put into operation.
You leave with
An operating ISMS with records.
المرحلة 4: Audit readiness
Internal audit, management review and certification audit support.
You leave with
Readiness for the certification body.
What you hold at the end
- ISMS scope
What the management system covers
- Statement of applicability
Which controls apply, and why
- Risk treatment plan
How each risk is addressed
- Internal audit report
Evidence the ISMS works before certification
Questions buyers ask
It depends on scope and starting point. The first phase produces a plan you can hold us to.
أخبرنا بما تسعى إلى بنائه
سواء كنت تحدّث منصة مصرفية، أو تطلق منتج مدفوعات، أو تؤمّن بنية تحتية قائمة، سنساعدك على تحديد المسار الصحيح.