MANAGEMENT SYSTEM CERTIFICATION

ISO Certification

We provide professional and impartial certification services based on international standards.

INFORMATION SECURITY MANAGEMENT SYSTEM

ISO/IEC 27001

Information Security Management System

APPLICABLE STANDARDISO/IEC 27001

OVERVIEW

An international standard for risk-based protection of information confidentiality, integrity and availability

ISO/IEC 27001 is the international standard specifying requirements to establish, implement, maintain and continually improve an information security management system (ISMS).

Based on organizational context and information-security risks, appropriate controls are selected and applied to protect the confidentiality, integrity and availability of information and provide confidence to interested parties.

WHO IT IS FOR

Who It Is For

Organizations holding important information assets such as customer, employee, technical and business information
Cloud/IT service, software, platform and data-processing organizations
Organizations responding to supply-chain, tendering and statutory information-security requirements

KEY REQUIREMENTS

Key Requirements

Context & Leadership

Define interested-party requirements, scope, information-security policy, roles and responsibilities

Risk Assessment & Treatment

Identify, analyze, evaluate and treat information-security risks using consistent criteria

Statement of Applicability

Use the Statement of Applicability (SoA) to manage selected controls, exclusions and implementation status

Operation & Performance Evaluation

Implement treatment plans, monitor performance, and conduct internal audits and management review

Improvement

Correct nonconformities and continually improve the ISMS

EXPECTED BENEFITS

Expected Benefits

Reduced risk of information leakage, cyberattack and service interruption

Response to legal, regulatory and contractual information-security requirements

Greater information-security confidence among customers and the supply chain

Clear security roles, responsibilities and incident-response arrangements

Integrated management of organizational, people, physical and technological controls

PREPARATION GUIDE

Preparation Guide

STEP 1Define the ISMS scope, information assets and business processes

STEP 2Assess information-security risks and establish a risk-treatment plan

STEP 3Prepare the Statement of Applicability (SoA) and implement controls

STEP 4Review security incident response, business continuity and supply-chain management

STEP 5Conduct internal audits, management review and improvement activities

CERTIFICATION INQUIRY

ISO/IEC 27001 Are you preparing for certification?

We review your organization and certification scope and guide you through the required process.

Certification inquiry →