ISO 27001 Implementation

Establishing the appropriate framework for the business needs and providing the organisations with the required skills.

To identify, within the defined scope, the maturity of processes, applicable controls, risks and mitigation control. To understand the business and to determine the gap between the standard requirements and the organisation practice so as to allocate resources for an efficient ISMS implementation.

To create the mandatory documentation and to start the risk treatment having the applicable control systems into account.

To perform the processes and procedures defined, highlighting the fulfilment of objectives, to identify both opportunities for improvement and non-conformities and to guarantee that the ISMS may be reviewed by the lead management.

Third-party audits to show the maturity of the ISMS and the reduction of risk according to the defined objectives. ISMS monitoring in the form of implementation and management services (planning, performance evaluation and continuous improvement).