Overview

Information is the lifeblood of all organizations and can exist in many forms. It can be printed or written on paper, stored electronically, transmitted by mail or by electronic means, shown in films, or spoken in conversation. In today’s competitive business environment, such information is constantly under threat from many sources. These can be internal, external, accidental, or malicious.

There is a need to establish a comprehensive Information Security Policy within all organizations. You need to ensure the confidentiality, integrity, and availability of both vital corporate information and customer information.

An Information Security Management System (ISMS) is a systematic approach to managing sensitive company information so that it remains secure. It encompasses people, processes and IT systems.

ISO/IEC 27001:2005 (formerly BS 7799-2:2002) establish best practices of control objectives and controls in the following areas of information security management:

  • Security policy;
  • Organization of information security;
  • Asset management;
  • Human resources security;
  • Physical and environmental security;
  • Communications and operations management;
  • Access control;
  • Information systems acquisition, development and maintenance;
  • Information security incident management;
  • Business continuity management;
  • Compliance.

Benefits

ISO/IEC 20000 certification demonstrates that an organization has adequate controls and procedures in place to consistently deliver a cost effective, quality IT service.

ISO 27001 implementation improves / leads to

  • Management Understanding of the Value of Organisational Information
  • Customer Confidence, Satisfaction and TRUST
  • Business Partner Confidence, Satisfaction and TRUST
  • e.g. Handling Sensitive Information of Customers & Business Partners
  • Level of Assurance in Organisational Security & QUALITY
  • Conformance to Legal and Regulatory Requirements
  • Organisational Effectiveness of Communicating Security Requirements
  • Employee Motivation and Participation in Security (Best Practices)
  • Organisational Profitability
  • Management and Handling of Security Incidents
  • Ability to Differentiate Organisation for Competitive Advantage
  • Organisational Credibility & Reputation
  • Ability to Differentiate Organisation for Competitive Advantage
  • Organisational Credibility & Reputation

Training

We offer a customized training program on ISO 27001:2005 for

  • ISO 27001 – Implementation and documentation requirements
  • ISO 27001 – Internal Auditor training