½ûÂþÌìÌÃ

Compliance with world-class standards of data security can help you win customer trust and new business opportunities.  

When you achieve ISO/IEC 27001 certification you’ll be able to show customers and stakeholders your commitment to managing information safely and securely. It’s a great opportunity to celebrate your achievement, promote your business, and show that you are a trusted organization which  could open up new business opportunities.

We make the certification process simple. After we have received your application, we appoint a client manager who will guide you and your business through the following steps.

1. Gap analysis
   This is an optional pre-assessment service where we take a closer look at your existing information security management system and compare it with ISO/IEC 27001 requirements. This helps identify areas that need more work before we carry out a formal assessment, saving you time and money.

---

2. Formal assessment
   This happens in two stages. First we review your organization readiness for assessment by checking if the necessary ISO/IEC 27001 procedures and controls have been developed. We will share the details of our findings with you so that if we find gaps regarding your data security, you can close them. If all the requirements are in place, we will then assess the implementation of the procedures and controls within your organization to make sure that they are working effectively as required for certification. 

---

3. Certification and beyond
   When you have passed the formal assessment you will receive an ISO/IEC 27001 certificate, which is valid for three years. Your client manager will stay in touch during this time, paying you regular visits to make sure your system doesn’t just remain compliant, but that it continually improves. 

---