ISO 27001 Certification FAQ: What’s involved?

29 Sep, 2016

Information is an asset which, like other important business assets, needs to be suitably protected. The ISO 27001 Information Security Management System is a systematic and pro-active approach to managing security risks which arise within an organisation.

The system helps businesses to identify and manage vulnerabilities, promotes efficient management of sensitive corporate information and highlights risks to ensure it is adequately protected against potential threats. The standard encompasses not just IT systems but places people and process at the heart of the system.

An ISO 27001 certification can be achieved by any business of any size, in any given sector, which is looking to protect sensitive data and enhance its security processes.

This standard will help your company coordinate all your security efforts both electronically and physically, cost effectively and with consistency to prove to existing clients and potential customers that you take the security of their personal/business information seriously.

• What does ISO 27001 certification involve?

The certification process can vary between different certification providers. As part of our process we start by carrying out an initial assessment, which allows us to identify any areas of noncompliance and suggest any recommendations.

We then produce a manual with the compulsory security procedures, tailored to and in line with your current business processes. Once all of the requirements are met, we present you with the manual and your certificate.

As part of the standard you will need to identify the scope of your business, create an information security policy, produce an asset register and a risk assessment and examine your security controls, which could be policies such as access rights and working from home.

Once all set up and certificated, you will be audited on a yearly basis to ensure you are in line with the standard and still delivering to your policies. At ISO Quality Services Ltd, we also offer a 6-month internal review in which a consultant will visit you and review your system, providing help and support to make sure your system is where it needs to be to achieve re-certification.

• How quick is the ISO 27001 certification process?

With ISO Quality Services Ltd you can achieve certification the ISO 27001 within 6-8 weeks.

• How long does the ISO 27001 certification last for?

The certification is reviewed and renewed on an annual basis.

• What is the cost for ISO 27001 certification?

The costs for ISO 27001 depend on the size of your business and the number of your employees. If you would like to find out specific costs to implement ISO 27001 in your business, please request a quote on our website or get in contact with us to arrange an appointment at your offices.

Worcester-based, ISO Quality Services Ltd is proud to specialise in the implementation and certification of the internationally recognised ISO and BS EN Management Standards.

Do you want to protect the data within your business? Are you seeking training to understand the ISO 27001 further? Contact ISO Quality Services Ltd today on 01905 670303 or email info@isoqsltd.com.

The National Cyber Skills Centre and ISO Quality Services Limited are collaborating on a 12 week series of articles, made available free their respective websites, to raise awareness for SMEs on how the adoption and adherence to a recognised industry or international standard provides the levels of information security and governance expected in todays business world.