WHAT IS ISO 27001?

​ISO 27001:2013 is a framework for an Information Security Management System (ISMS) to manage your organisation’s sensitive information to make sure that it stays secure. This involves identifying and managing the risks around your people, processes, and IT systems.

ISO 27001 certification shows that you operate to this international best practice for information security management.

Generally speaking, most organisations and businesses will have some form of controls in place to manage information security. These controls are necessary as, in recent times, information has become one of the most valuable assets that a business owns.

ISO27001 requirements are about how well these controls are organised and monitored. Many organisations introduce security controls haphazardly: some are introduced to provide specific solutions for specific problems, whilst others are often introduced simply as a matter of convention.

Such a random security policy will only address certain aspects of IT or data security, and can leave valuable non-IT information assets like paperwork and proprietary knowledge less protected and vulnerable. The ISO 27001 standard was introduced to address these issues.

HOW TO GET ISO 27001?

As your ISO 27001 consultant, we make the ISO 27001 compliance process straightforward by:
  • reviewing the arrangements you have and helping you to identify what else you need to achieve ISO information security;
  • formulating and implementing a plan to address any gaps between what you have and what you need;
  • developing any policies, procedures and processes in support of your information security system;
  • identifying and evaluating the aspects of your business that can impact on information security;
  • facilitating internal audits of your organisation.
Using The Ideas Distillery throughout this process means that we will:
  • Bridge the knowledge and resource gap;
  • Bring experience and insight to your ISO 27001 information security management systems project, considerably improving your chance for success for certification first-time by preventing any serious mistakes in development and implementation;
  • Fast-track the development process by effectively planning, supporting and ensuring adequate resources.
  • Save time and money by developing effective systems that realise benefits early and consequently get quicker payback on your project investment.

Training and awareness programme

We can also provide your staff with a simple or comprehensive training programme (whichever you need) covering staff operation of your new Information Security Management System as well as basic cyber security awareness. 

Anyone involved in an ISMS implementation needs to understand the requirements of the standard and how its requirements are addressed in practice. This would include awareness and understanding for risk management, ISMS objectives and broader measurement & evaluation, internal audits, management reviews, nonconformities and corrective actions, as well as continual improvements. Those involved with staff communication and HR should also get involved.

Then there are the general cyber security risks which you may want to train your staff in. Cyber criminals have certainly been using the pandemic in their relentless phishing and ransomware attacks. There has been a significant increase in malicious e-mails and misinformation. In addition, research has found that work-from-home employees ‘confidently’ make 90% of all security awareness mistakes.
Find out how close your business already is to getting the 27001 ISO standard completely FREE with our Gap Analysis...
Need to work out if getting ISO 27001 makes financial sense? Then use our exclusive Cost Benefit Analysis tool to find out if it's worth it...
​Over the years we've helped hundreds of organisations to achieve certification, and auditors always report back that our clients' systems are of the highest quality. So our 100% Pass Guarantee is simple - if you don't pass your certification audit first time - with whichever Certification Body you choose - and as long as you've done what we've advised you to do - we'll give you a full refund! ​
Don't forget your FREE, tailored Gap Analysis! Don't forget your FREE, tailored Gap Analysis!
Get your completely FREE, no obligation, tailored report - worth £450!
​
So you want to find out more about how ISO standards might fit into your business?

Our Gap Analysis is a no-cost way of 'dipping your toe in the water' to see, from a professional's point of view, how close you would be to implementing your desired management system.
Our ISO experts will understand your current business and map it against the ISO standard, then provide concrete recommendations for you to take forward.

This is not one of those online tools which simply regurgitates each clause and ask you to put in 'yes' or 'no' against each section, without really explaining what each question means.

​It's a genuine consultancy engagement which will give you a proper report on your current status as a company.