Oops, something went wrong!

We track these errors automatically, but if the problem persists, please feel free to contact us. In the meantime, please try again.

ISO/IEC 27001 certification demonstrates to existing and potential customers that an organization has defined and put in place best-practice information security processes. ISO 27001 is the only auditable international standard that defines the requirements of an information security management system (ISMS).

An ISMS is a set of policies, procedures, processes, and systems that manage information risks, such as cyber attacks, hacks, data leaks, or theft. By implementing an ISMS certified to ISO 27001, your organization can benefit greatly: avoiding the losses and financial penalties associated with data breaches, winning new business, and strengthening relationships with existing clientele.

On-demand ISO 27001 webinars

Webinar: The transition strategy for ISO 27001:2022

Presenter: Alan Calder, Founder and Executive Chairman, IT Governance

The ISO 27001 standard has recently been updated, introducing key changes organisations must adopt to remain compliant. As a result, many companies may need some pointers on how to effectively transition from ISO 27001:2013 to ISO 27001:2022.

Read more

Practical steps to conducting an ISO 27701 gap analysis

Presenter: Alice Turley, GDPR Consultant, ITG Europe

ISO 27701 offers a best-practice approach to help organisations implement privacy security controls, expanding on ISO 27001’s clauses and Annex A controls that relate specifically to data privacy, as well as providing two additional sets of controls specific to data controllers and data processors.

Organisations that have implemented an ISO 27001-compliant ISMS (information security management system) can build on their existing work and address data privacy with ISO 27701. By conducting an ISO 27701 gap analysis, you can prioritise work areas to achieve compliance with the Standard and implement a PIMS (privacy information management system).

Read more

How to integrate privacy into your ISO 27001 ISMS

ISO 27701 is the privacy information standard that specifies the requirements for a PIMS (privacy information management system), and can be bolted onto an organisation’s existing ISO 27001-compliant ISMS (information security management system) to ensure effective privacy management.

While ISO 27001 addresses information security, ISO 27701 provides organisations with guidance on implementing privacy control measures to prevent unauthorised use or disclosure of personal data, supporting your organisation’s GDPR (General Data Protection Regulation) compliance.

Read more

ISO 27701: the new privacy extension for ISO 27001  

There’s a new standard for data privacy – ISO 27701. It’s the first document in the ISO 27000 series dedicated to privacy, explaining how organisations can create a PIMS (privacy information management systems) and meet best practices outlined in regulations such as the GDPR (General Data Protection Regulation).

The Standards approach recognises that by expanding on ISO 27001’s clauses and Annex A controls that relate specifically to data privacy, as well as providing two additional sets of controls specific to data controllers and data processors, your organisation will be able to demonstrate that it has taken the steps to comply with international privacy laws and regulations.

Read more

ISO 27001, cybersecurity and the importance of people 

Many if not most breaches have a human factor – someone either accidentally or maliciously does something they should not do which leads to or expedites a breach. The importance of people in the protection of confidential and personal data is often underestimated.  

Read more 

Assessing compliance: the ISO 27001 ISMS internal audit

Testing and assessing your information security measures is essential to ascertain whether the controls you have implemented are working effectively. Compliance with the international information security standard ISO 27001 requires continual monitoring and regular reviews of the ISMS. An internal audit is an effective measure to assess whether your ISMS is functioning as it should, and one of the requirements for ISO 27001 certification.

Read more

How to overcome your data security compliance challenges

Increasingly stringent data security laws and regulations both in Ireland and throughout Europe, combined with a rapidly evolving cyber threat landscape, call for stronger, smarter, and more robust data security solutions.

Read more

How to implement an information security management system

Implementing an ISMS based on the best-practice guidance set out by ISO 27001 and ISO 27002 delivers numerous benefits, including reducing your risk of a data breach.

Read more

Conducting a cybersecurity risk assessment

ISO 27001 is the international standard that sets out the specification of an ISMS, a best-practice approach to addressing information security that encompasses people, processes, and technology.

Read more 

top
Protect your
business
this winter