ISO/IEC 27001:2022
Information security management
Manage the risks to your business information.
Discuss this service
A practical approach
Support shaped
around your needs.
An information security management system starts with the information, services and people in scope. We help define the risks, decisions and evidence needed to manage confidentiality, integrity and availability in a way that fits your organisation.
We support the management system and review its evidence. Specialist testing or technical implementation can be scoped with the appropriate security provider.
How we can help
- Define the ISMS boundary, interested parties and information assets
- Set a repeatable risk assessment method and maintain a risk treatment plan
- Select and justify applicable controls in the Statement of Applicability
- Clarify responsibilities, access, supplier and incident processes within the agreed scope
- Set security objectives and check the evidence that controls operate
- Carry out internal audits, management review and corrective action
- Prepare for independent certification and respond to audit findings
Preparing for certification
We help you develop and review your system. Your appointed certification body carries out its independent assessment and makes the certification decision.
Let’s move your business forward
What do you need
help with?
A new standard, an upcoming audit or a system that needs attention. Let’s discuss the right support for your business.
Talk to AJF