ISO 27001:2013 specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system, within the context of the organisation. It also includes requirements for the assessment and treatment of information security risks tailored to the needs of the organisation. The requirements set out in ISO/IEC 27001:2013 are generic and are intended to be applicable to all organisations, regardless of type, size or nature.
It is one of the most popular information security standards in the world, with certifications growing by more than 450% in the past ten years. ISO 27001 is supported by its code of practice for information security management, ISO/IEC 27002:2013
Benefits of implementing an Information Security Management System include:
- Helps protect all forms of information, including digital, paper-based, intellectual property and personal information.
- Increases resilience to cyber attacks.
- Provides a framework for keeping your organisation’s information safe and managing it all in one place.
- Offers organisation-wide protection from technology-based risks and common threats such as ineffective procedures.
- Helps respond to evolving security threats both in the environment and inside the organisation.
- Reduces costs associated with information security.
- Protects the confidentiality, integrity and availability of data with a set of policies, procedures, and technical and physical controls.
- Ensures timely resumption of information and critical business processes.
- Improves company culture and enables employees to embrace security controls as part of their everyday working practices.
This standard addresses the information security culture of the Organisation and TLN Consulting will ensure policies and procedures are written which reflect and address your business needs and risks, as well as those of your customers, the standard and all legal requirements.