ISO 27001 – Jargon Busters

In the latest in our series of cyber security jargon busters, we give the low down on ISO 27001.

ISO 27001 is the international standard for Information Security. It provides a framework for an ISMS (information security management system). This enables organisations to manage the security of assets like finance information, intellectual property, employee details or information entrusted by third parties.

It’s a great tool for organisations of any size and in any sector to keep their information assets more secure. It allows the business to demonstrate that it is effectively securing information assets, managing risks, and continually improving information security. 

Implementation generally takes around 3-6 months, but depends on resource availability and scope of the organisation. We have managed to implement it within a 12 week process for some clients. 

ISO 27001 can be used as a tool to manage GDPR compliance. It allows you to bid for contracts with larger organisations that require the certification, to minimise the evidence required for a larger organisation to complete their due diligence, and to identify your information assets and their value, so you can make informed decisions to mitigate risks and ensure efficient spending.

Understanding what you are protecting and identifying the controls you need to implement will allow you to mitigate risks to your information assets.

Once implementation is complete then you are ready for a stage one audit to determine that you have an ISMS in place. After this, a stage 2 audit will then check to see if the ISMS is working. Once the accreditation body is satisfied that you have met the standard, they will issue you with your certification.

We tailor our ISO 27001 consultancy service to your individual needs and circumstances. So get in touch at info@securious.co.uk, and we’ll provide you with a quote based on your situation and requirements.

Alternatively, we’ve pioneered the  Securious ISO 27001 Academy. We work with businesses in a series of online workshops, for just £2,895 +VAT which includes all the necessary templates.

You can learn more about ISO 27001 at the Securious ISO 27001 page, or you can check out our Ultimate Guide.