Protecting your organization’s information assets are a vital component of modern-day business operations. All businesses have either a legal, regulatory or contractual obligation to ensure that the confidentiality, integrity, and availability of the information they process is correctly maintained.

The frequency of Cyber-Attacks and the accidental disclosure of confidential information are becoming more and more common; an organization can suffer financial penalties, loss of productivity and significant reputational damage.

One approach to deal with the current threats is for the organization to implement an Information Security Management System (ISMS) that meets the specification requirements of  ISO27001.

An ISMS that complies with the ISO27001 specification preserves the confidentiality, integrity, and availability of information by taking a risk management approach to managing information security. An organization that complies with the standards laid out in the ISO271001 specification gives confidence to interested parties that all information security risks are adequately managed.

If you are an SME operating in the Merseyside area, I can help you decide if implementing an ISO27001 ISMS or being certified to IS27001 is the correct way forward for your business.

I provide an “affordable professional service” in the following areas of Information Security Governance

• Initial Gap Analysis
• Risk Assessments
• Policy, Procedure and Work Instruction Development
• Information Security Auditing