|
ISO/IEC 27001:2005/ISO/IEC 27001:2005
The final version of ISO/IEC 27001:2005, the international information security standard, was released on October 15, 2005. Upon release ISO/IEC 27001:2005 supersedes BS 7799-2:2002 for certification requirements. This new version has been under development since 2000 and introduces a number of important changes making it the most widely accepted information security standard in the world. As the trend in information security continues to change from technical security controls to a greater concern for overall business risk management, ISO 27001 will grow in worldwide acceptance as the recognized standard to guide businesses in the establishment of an acceptable level of risk tolerance and to successfully manage and mitigate risk in an interconnected eBusiness environment. ISO 27001 is a code of practice for Information Security Management Systems (ISMS) developed by industry for industry. An ISMS is the means by which Senior Management monitors and controls their security, minimizing the residual business risk and ensuring that security continues to fulfill corporate, customer and legal requirements. ISO/IEC 27001:2005 provides 133 information security controls under 11 domains and enables users to identify the controls appropriate to their particular business. ISO 27001 provides a comprehensive framework to guide and focus your efforts in building an ISMS. The standard provides guidance on security policy, staff security awareness, business continuity planning and legal requirements. ISO/IEC 27001:2005 is the Specification used for the Certification of an Information Security Management System. WHAT ARE THE BENEFITS? ISO/IEC 27001:2005 and ISO/IEC 27001:2005 provide organizations with the assurance of knowing that they are protecting their information assets using criteria in harmonization with an internationally recognized standard. As laws and regulations continue to change ISO/IEC 27001:2005 incorporates a requirement for identifying which laws are relevant to your operation and assures that you have addressed compliance. Benefits are applicable to organizations of all sizes and all ISMS maturity levels, not only large enterprises. ISMS certification can provide many benefits:
WHY CHOOSE C&H FOR YOUR CONSULTING NEEDS? C&H recognizes that many organizations have made significant investments to implement policies and systems supporting quality, security, privacy and compliance requirements. An integral part of our methodology evaluates the value of policy and systems in place to make full use of any existing knowledge or best practice with a view to expedite ISMS implementation. C&H offers the advantage of protecting your existing investment as well as the shortest possible ISMS implementation schedule. We are dedicated to providing risk mitigation solutions to our clients. ISO/IEC 27001:2005 and ISO/IEC 27001:2005 are at the heart of our ISMS assessment business. C&H has been selected by the British Standards Institute (BSI) to perform pre-certification consulting services, audits and support for organizations seeking certification. We have developed an expert level understanding of the Standard and know how to design, manage and guide implementation plans to achieve compliance leading to certification if desired, in a professional and pragmatic manner. Every opportunity to incorporate existing systems, controls and procedures into the customized compliance plan for your organization will be maximized. Our consultants have been professionally trained by BSI and in combination with their extensive experience in business management, finance, IT operations, information security and best practice, are well qualified to assist your organization. We have significant experience in diverse industries, including; Pharmaceutical, Banking, Defense, Technology, Professional Services, and Healthcare. Each of our consultants has extensive training/experience in leading organizations through the ISO/IEC 27001:2005 compliance and certification process. SERVICES The first step in establishing an Information Security Management System is to identify the areas of your business which are most at risk, or would produce the most gain from implementation. This effort identifies the Scope of your ISMS. Second, C&H will take measure of any existing elements of an ISMS already in place to speed compliance implementation. C&H services offered include:
For more information on Churchill & Harriman, please Click Here.
|
 |
|||||||
Engaging Your Vendors
|
|
||||||
 |
|
| Site Contents © 1999 - 2008 Churchill & Harriman All Rights Reserved | |