ISMS consulting

The problem

Aside from technical aspects, information systems security requires sound and effective management system to be in place. Without an efficient and well defined management system, security problems are often solved at the bottom level by implementing individual security controls. These resolve only a particular problem or security breach at the particular time.

In the long term that approach is not beneficial for significant improvement in security overall and the losses which organization may incur can be considerable. Experience has shown that management of information security requires a combination of organizational and technical skills. These will provide a complete and reliable security system which covers an entire organization and its' employees.

Service

The ISMS (Information Security Management System) consulting service provide complete support in all the phases of ISMS implementation in accordance to the ISO 27001:2005 standard to our clients. INFIGO IS experts (link) will provide you support and advise to accomplish:

Scope definition,
Security policy development
Asset inventory and risk analysis
Risk treatment
Selection and implementation of the ISO 17799:2005 controls,
Statement of Applicability.

ISMS consulting service covers other phases of the security management process: operation, continuous monitoring and improvement, corresponding documentation and procedures, awareness training, internal audits, management support, documents and records control.

Benefit

The ISMS implementation ensures effective security management for our clients and confidence in their systems.

Clients can be prepared for the ISO 27001:2005 (BS 7799-2:2005) certification which can be conducted by the chosen accredited organization.

contact

Management systems: