Definition
ISO/IEC 27001 is the international standard for an information security management system (ISMS). It requires a business to identify its information assets (customer data, contracts, designs, systems), assess their risks, put controls in place against those risks and improve them continuously. The certificate is issued after an audit by an accredited certification body and maintained by annual surveillance audits. The standard's Annex A lists control areas such as access control, cryptography, backup, physical security, supplier relationships and incident management. Large customers, public tenders and export markets increasingly require the certificate; its real value is a measurable reduction of ransomware and data-loss risk.
Så använder SMB Teknoloji det
We do not issue the certificate; we prepare you for the audit with gap analysis, risk assessment, documentation and technical controls, and accompany you during the certification body's audit.
Relaterad tjänst: Standards Compliance & Certification Readiness