ISO Certification
ISO/IEC 27001 and related management-system certifications — an information security management system that is genuinely used, not written for the audit.
Ce que vous détenez à la fin
- ISMS scope
- Statement of applicability
- Risk treatment plan
- Internal audit report
How the engagement runs
Each phase ends with something you can review before the next one starts.
Phase 1: Context & scope
The organisation, its interested parties and the ISMS scope defined.
You leave with
An agreed ISMS scope.
Phase 2: Risk assessment
Information security risks assessed and treatment chosen.
You leave with
Risk register and statement of applicability.
Phase 3: Implementation
Controls, policies and the management system put into operation.
You leave with
An operating ISMS with records.
Phase 4: Audit readiness
Internal audit, management review and certification audit support.
You leave with
Readiness for the certification body.
What you hold at the end
- ISMS scope
What the management system covers
- Statement of applicability
Which controls apply, and why
- Risk treatment plan
How each risk is addressed
- Internal audit report
Evidence the ISMS works before certification
Questions buyers ask
It depends on scope and starting point. The first phase produces a plan you can hold us to.
Aussi dans Solutions de sécurité et de conformité
Présentation de la practiceDites-nous ce que vous cherchez à construire
Que vous modernisiez une plateforme bancaire, lanciez un produit de paiement ou sécurisiez une infrastructure existante, nous vous aidons à définir la bonne trajectoire.