|
ISO/IEC 27001 Information Technology - Security Techniques - Information Security Management Systems - Requirements
This standards objective is to "provide a model for establishing, implementing, operating, monitoring, reviewing, maintaining, and improving an Information Security Management System".
An organization can implement and register their ISMS which should be tailored to their needs, "The design and implementation of an organization's ISMS is influenced by their needs and objectives, security requirements, the process employed and the size and structure of the organization".
Similar to other Management Systems this ISMS is designed around the Plan - Do - Check - Act model.
Training Offered
Internal Auditor Training
Advanced Internal Quality Auditor Training
Document Writing
Services Offered
Initial System Evaluation ("Gap Analysis")
Documentation Development
Implementation Assistance and Guidance
Final System Evaluation ("Dress Rehearsal")
Hands-on Auditing
Contract Internal Auditing Program
Compliance Auditing
|