ISO / IEC 27001 Readiness Services 

iso_27001_02The International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) have established the ISO/ IEC 27001 standard to assist organizations in securing their information assets. More than 33,000 organizations have adopted this standard to manage the security of financial data, intellectual property, employee data, payroll data, and information entrusted to them by third parties.
 
An update to ISO / IEC 27001 was published in October 2022, with the new 27001:2022 standard updating the previous 27001:2013 version.  An important supplement to the 27001 standard is a reference set of information security controls and implementation guidance known as 27002:2022, which was also updated from 27002:2013.
 
The ISO / IEC 27001 standard provides detailed, customizable guidance to help organizations create, implement, maintain, and continuously improve their information security management systems (ISMS). It is often adopted to aid compliance with HIPAA and other regulations, including the GDPR.
 

Preparing for ISO/ IEC 27001 certification or renewal

Organizations who adopt the ISO / IEC 27001 standard receive certification, which is required to be renewed every three years. Our services include preparing clients to obtain initial certification, continuously improve their systems, and renew their certification. We assess against the 27001 controls, review policies and procedures, evaluate IT controls, and analyze how the ISMS has been established, for example.

Among our ISO / IEC 27001 readiness services are:

  • Gap Assessment between your current state and ISO 27001 controls
  • Security Risk Assessment (based on ISO / IEC 27001, or NIST CSF)
  • Improvements to your overall information security program as well as to your Information Security Management System (ISMS) as needed
  • Review of existing policies and procedures, and creation of new policies and procedures as required
  • Review of existing IT controls and practices, and creation of new IT controls as required
  • Detailed report with findings, feedback, and recommendations.

Schedule a Call
24By7 Security