ISO27001 - the Information Security standard
ISO/IEC 27001:2013 (ISO 27001) is an internationally recognised information security standard. It demonstrates that your company is following information security best practice
ISO27001 specifies a management system that is intended to bring information security under management control and gives specific requirements. Organizations that meet the requirements may be certified by an accredited certification body following successful completion of an audit.
How to get ISO27001
The process for achieving ISO27001 can be broken into four main stages as follows:
1. Initial assessment
Identify assets & risks
Consider how to reduce risk
Prioritise and plan
Develop and deploy processes
Review and improve
Documentation is compiled
Policies and procedures developed
Version control implemented
First stage (cursive) audit
Second stage (in-depth) audit
Ready to make a start on ISO27001?
Give us a call on 01530 637 833.
Why you should do ISO27001
Think of the information in your business as an asset. Like other important business assets, information has a value and consequently needs to be suitably protected.
ISO27001 will help coordinate both your electronic and physical security efforts. It provides you with a coherent, cost effective and consistent approach. This is why so many businesses (and with that, potential customers) recognise ISO27001 as proof that you take the security of their personal / business information seriously.
Benefits for your business, your clients and your staff
Reducing risk reduces incidents
ISO27001 improves brand perception
More robust procedures give better results
You can demonstrate solid security processes
Supply chain benefits
Up and down chain confidence in security
Certification replaces lengthy delarations
Appropriate controls reduce accidents
Clearly defined roles
Everyone knows what’s expected of them
If you follow the rules, you’re doing it right