What is ISO 27001?
ISO 27001 provides the specifications for an information security management system (ISMS). An ISMS is a framework of policies and procedures that includes all legal, physical and technical controls involved in an organisation's information risk management processes.
ISO 27001 was developed to "provide a model for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an information security management system."
ISO 27001 uses a topdown, risk-based approach and is technology-neutral. The specification defines a six-part planning process:
- Define a security policy
- Define the scope of the ISMS
- Conduct a risk assessment
- Manage identified risks
- Select control objectives and controls to be implemented
- Prepare a statement of applicability
The path to ISO 27001 certification
Why do you need ISO 27001 Certification?
Certification (being entirely optional) is increasingly being demanded from suppliers and business partners by organizations that are concerned about information security. Certification against ISO/IEC 27001 brings a number of benefits above and beyond simple compliance. The certificate has marketing potential and should help assure most business partners of the organization’s status with respect to information security without the necessity of conducting their own security reviews.
Our Services
CipherTronix provides comprehensive consultancy in terms of getting the framework ready for an ISMS in addition to this we have ISO Certified Lead Auditors on board for carrying out the actual Audit.