ISO 27001:2013 Information Security Management Systems

What is ISO 27001 Information Technology Security?

An ISO 27001 Information Technology Security Management System will help you to manage information security within your organisation.  The aim is to help organisations make the information assets you hold more secure, by establishing, implementing, maintaining an continually improving your Information Security Management System.

What are the benefits of ISO 27001 Information Security Management?

  • Allows you to become a more consistent competitor.
  • Helps you to meet customer requirements.
  • Win more high value customers.
  • Increases business opportunities by demonstrating compliance.
  • Allows for better controls to ensure your systems work effectively and efficiently.

As more organizations are using ISO as a qualification standard for prospective suppliers, it have established itself as a “must have’ as opposed to a ‘nice to have’.

We support any organization, small or large, manufacturing or service with a specifically designed Information Security Management System, train your employees and guide you through implementation to successful certification.

The High Level Structure:

  • Scope
  • Normative Reference
  • Terms and Definitions
  • Context of the Organisation
  • Leadership
  • Planning
  • Support
  • Operation
  • Performance Evaluation
  • Improvement

Requirements: ISO 27001:2013

ISO 27001:2013 Information Security Management Systems

Thorne Management Systems Services Include:

  • Conducting a gap analysis to ascertain here your company is with regards to an Information Security Management System.
  • Preparing the written paperwork for the Information Security Management System, this includes the Policy, Manual and the necessary Procedures.
  • Training your employees to participate in and administer the Information Security Management System.
  • Coordinating the implementation of your system.
  • Monitoring you progress through Internal Audits and Management Reviews.
  • Aiding you in choosing a certification Body.
  • Assisting you with the rectification of your Certification Body’s audit findings.

Organisations implementing multiple management systems (e.g., quality, environmental, occupational health and safety) can achieve better integration and easier implementation.