What is ISO 27001 and ISO 27001 certification: A brief explanation
What ISO 27001 standard is and how it is connected to ISO 27001 certification.
- ISO 27001 isan international standard on information securitythat is recognised around the world. The main goal of ISO 27001 is to ensure that only authorised individuals can access the information, can only change the information, and is easily accessible when required.
- ISO 27001provides a framework for businesses of any size or industry to set up an effective and reliable system to manage their information(Information Security Management System).This involves clauses that outline the requirements and a set of rules referred to as “controls” that your ISMS should follow.
- Businesses that set up an ISMS according to the requirements outlined in ISO 27001 standard can obtainISO 27001 certification. (In short, this means that your ISMS has been given the stamp of approval by an independent certifying body.)
-
ISO 27001 compliance requires an initial certification audit (extrernal assessor), a recertification audit every three years (external assessor), internal audits every year; and after you are awarded your certification, your organization will need to undergo surveillance audits (external assessor)in years one and two after your certification audit. In year three, you’ll need to undergo a recertification audit.
Engagement Hub and ISO27001
Information security and privacy has become a key challenge for small business owners to overcome and this is increasing IT involvement in procurement. . Engagement Hub has decided that gettingISO 27001 certification will assist us to demonstrate to clients that we hav aninformation security system that is in line with international standards, giving them peace of mind that oursystems and the data theycollect are organised, secure from all types of threats, and also protected from future threats.
- Process and store the information securely,
- Set up a system to manage information security risks,
- Allocate dedicated resources to focus on information security
This page is designed to collect and store information necessary to maintain our ISMS (Information Security Management System) and assist with audits by maitining a record of the work we are doing to maintain security and privacy.
Some Tasks will be send on a regular basis and others will be ad-hoc as required. Each will have a deadline, so please respond by that date or make arrangements if this cannot be achieved.
The News/ Blogs widget has been set up to be a repository of interesting information to keep yourup to date (and your emails boxes clear); and support the more formal training that will be a core part of our ISO 27001 process. Please note, we would like you to log in using your work email when you use this site so we can have a record of the work being done.
For more infomation on this page or specific requests, please contact Kate Woodbridge or Gillian Woolley on ...
