Subscribe

Request a proposal

Portals


Services Business advisory Technology advisory ISO 27001 – Readiness assessment 

ISO 27001 – Readiness assessment 

An Information Security Management System (ISMS) is a comprehensive approach to safeguarding sensitive company information. It integrates people, processes, and IT systems through a risk management process to ensure data security.  

ISO/IEC 27001 is a globally recognised and certifiable standard for establishing an ISMS, it enables organisations to manage their information security by setting clear policies and procedures, addressing risks, and ensuring compliance with legal and regulatory requirements; achieving customer trust and manage financial & reputational risk from data breaches. 

How we can assist your organisation 

ISMS follows the Plan-Do-Check-Act (PDCA) cycle: Plan (set objectives and policies), Do (implement ISMS and controls based on risk assessment), Check (monitor processes and identify improvements), Act (implement corrective actions).  

Whether your security management system includes: 

  • Identifying gaps within your current operating framework 
  • Establishing an ISMS based on a reputable, certifiable standard 
  • Preparing for ISO 27001 certification or re-certification 
  • Assessing readiness for ISO 27001 compliance 
  • Evaluating your controls against ISO 27001 guidelines.

We can assist you in achieving your ISMS goals through the customised service offerings, leveraging our extensive experience in ISMS-based assessments. Our team of certified professionals brings deep expertise in information security across various industries, ensuring that your organisation is well-prepared to meet its security objectives.

Current state assessment

Establish the organisation context for information security with key stakeholders to:  

  • Understand business strategy, technology & cyber security infrastructure and alliance to support strategic goals 
  • Adoption of cyber security framework, IS policies, procedures, standards. 

Deliverable: Current state assessment report 

Mapping with ISO 27001

Input from current state assessment forms the basis to review:  

  • Risk assessment and documentation of controls  
  • Information security policy based on ISO27001 control requirements  
  • Mapping of ISO 27001 requirements i.e. Clauses 4 – 10 and Annex A controls. 

Deliverable: Baseline for gap analysis 

Gap analysis

  • Review the implementation status of ISO 27001 clauses 4 – 10 i.e. Context of Organisation, Leadership, Planning, Support, Operation, Performance Evaluation, Improvement 
  • Information security policy and procedures in-line with ISO 27001 Annexure A.

Deliverable: Gap analysis report 

Future state proposition 

Identified gaps to be discussed with the management: 

  • Develop and agree on the future state road map. 

Deliverable: Statement of Applicability for Information Security Management System (ISMS) 

We have an established methodology designed to efficiently execute ISMS engagements, enabling your organisation to strengthen its cybersecurity posture over time.