Safeguard your information

Establishing an industry-accredited information security management system (ISMS) will enable you to establish a control structure that will help to keep your data safe. Our experienced consultants will guide you through the entire process – from initial scoping through to remedial changes and certification auditing.

Benefits of accreditation

Having in place an accredited security framework doesn’t just give you peace of mind. It can also drive efficiency improvements and enhance your business reputation, delivering significant competitive advantage by:

• Enhancing the perception of your organisation amongst clients – and potential clients
• Being a deciding factor in winning contracts
• Increasing business partner confidence
• Helping you to develop best-practice-based processes
• Improving security awareness throughout your organisation

Internationally-recognised standards

We implement a wide range of security frameworks on behalf of our clients. This is backed up by our own certification to ISO/IEC 27001 standard. Key areas of expertise include but are not limited to:

• ISO/IEC 27001
  A framework for companies looking to enhance their ISMS by evaluating information security risks and implementing comprehensive controls
• COBIT (Control Objectives for Information and Related Technology)
  A set of best practices for IT management, governance and control
• COSO (Committee of Sponsoring Organisations of the Treadway Commission)
  A comprehensive framework for measuring internal control systems
• ISF (Information Security Forum)
  ISO 31000 seeks to provide a universally recognised paradigm for practitioners and companies employing risk management processes
• OCEG (Open Compliance and Ethics Group) Red Book Governance, Risk and Compliance (GRC) Framework
  Helping organisations improve and implement maturity models based around GRC requirements and best practice

Structured implementation process

Our 5-step process provides a structured approach to certification.

• Scoping
  Recognising processes which are instrumental to the organisation, and identifying issues of concern at an early stage in the planning process
• Gap analysis
  Performing a detailed assessment of your processes, and comparing them to those required by the ISO/IEC 27001 standard
• Risk assessment
  Identifying all levels of information security risk and producing a risk treatment plan detailing security controls that need to be implemented to tackle the risks identified
• Remediation
  Implementing the necessary changes needed to achieve certification
• Certification
  Steering you through the certification process and, if required, acting on your behalf when organising the audit