BS EN ISO 27001:2005
Information technology. Security techniques. Information
security management systems.
In conjunction with
Avitar Ltd
The aim of ISO 27001 is to provide best practice advice in
keeping personal, intellectual property, sensitive and
commercially valuable data secure; a failing that we hear
all too much about in the news, where Identity Theft is becoming
an everyday threat and data is being lost or stolen.
Published on 15 October 2005, this standard primarily defines an
Information Security Management System (ISMS) and complements
the 'code of practice', now available as ISO 27002. The standard
is not just aimed at IT departments or companies but all
organisations that involve people when handling information that
needs to be kept secure.
ISO 27001 specifies the requirements for the information
security management system itself, against which certification
can be achieved. ISO 27001 has been harmonised to be compatible
with other management systems standards, and our consultants can
assist in integrating this as necessary.
The international status of ISO 27001 is having a global impact
and its application gathers more interest in both information
security management and certification as organisations gain from
this recognition and from increases in security.
Our consultants can assist in designing an information security
management system (ISMS) that meets ISO 27001, APACS Standard 55
and more importantly your needs. This ensures the selection of
security controls are adequate and proportionate in protecting
your information assets and gives confidence to all interested
parties including your customers.
In today's world of Corporate Governance this standard is
suitable for different types of organisational use, including:
Formulation of security requirements and objectives
To ensure that security risks are cost effectively manage
To ensure compliance with laws and regulations
As a process framework for the implementation and management
of controls to ensure that the specific security objectives
of an organisation are met
Identification and clarification of existing information
security management processes
To determine the degree of compliance with the policies,
directives and standards adopted by an organisation and for
certification purposes
To provide relevant
information about information security policies, directives,
standards and procedures to trading partners and to
customers.
Avitar are consultants who specialise in putting in simple
uncomplicated management systems to meet the requirements of the
ISO 27001 without unnecessary administration
