Our Approach to ISO27001 Advisory and Certification
Initial study
Conduct an initial study of business to understand your card processes, the environment and accordingly consolidate the scope.
Scope Definition
Understand your business operations, controls, and systems to define the scope (People, Process, and Technology) as applicable.
Gap Analysis
Assess your organization vis-à-vis the ISO27001 standard to identify areas that need to be addressed.
Awareness Training
Conduct a brief Awareness Training program on ISO27001 for your organization.
Asset Classification
Identify your critical information assets and accordingly classify them for creating a separate Asset inventory.
Risk Assessment
Conduct a comprehensive Risk Assessment to identify weak areas and loopholes that could impact the business-critical assets of your organization.
Risk Treatment
Our experts rank the risks identified and accordingly help you strategize appropriate Risk Treatment measures.
Documentation Support
We help increating documents of policies and procedures with inputs and validation acquired from your team.
ISMS and Policy Rollout
Our process and Tech team will work in collaboration with your team to help you in the ISMS and related policy rollouts.
User Training
User Training program for all personnel covered in scope on their specific ISMS responsibilities. Training content shall be provided.
Pre-Assessment
After a reasonable gestation period, a separate team of experts conducts a Pre-assessment of your setup and measures implemented.
Certification support
Once all controls are confirmed to be in place, we help you get certified through any certification body of your choice.
Certification Support
Our team will provide you complete support and assistance in helping you achieve certification from external auditors (of your choice) for ISO27001.
Continual support
If required we can extend our continual support by offering you Managed Compliance Services to help your organization stay certified.
