INFORMATION GUARDIANS

ISO/IEC 27001 is the Information Security standard published by the International Organization for Standardization, which has also published a host of globally accepted standards such as ISO 9001 for Quality systems, etc. ISO enhanced and adopted the original British Standard BS 7799 for Information security and released the same as ISO 27001 in 2002. As on date, ISO 27001 is considered the “Gold” standard for Information Security. ISO/IEC 27001 is supported by associated standards and guidance such as ISO/IEC 27003 (Information Security Management System Implementation guidance), ISO/IEC 27004 (Information Security Management – Measurement), ISO/IEC 27005 (Information Security Risk Management). Further standards such as ISO/IEC 27007 (Guidelines for Information Security Management Systems auditing) are currently under development. For further details on ISO standards, visit their website from our “Useful Links” page.

We offer a training programme that covers the above standards. This programme is useful for those organizations that are contemplating obtaining an ISO 27001 certification and wish to train their personnel on the process and requirements. The programme is also very useful to those organizations that wish to understand the basic requirements of ISO/IEC 27001, in terms of information security maturity, and time and effort required for obtaining an ISO 27001 certification. The training programme is oriented towards business managers and is conducted on-site.

For those organizations that have already embarked on the journey towards ISO/IEC 27001 certification, we offer a pre-certification audit service. This audit is aimed towards identifying the lacunae or shortcomings in the processes and documentation vis-à-vis the ISO 27001 standards. While organizations do conduct need to conduct a self-audit, an audit conducted by a third party with extensive in-house IT operations and audit experience backed by multiple global certifications adds a different dimension to the audit.