ISO 27001 certification, titled "Information Security Management - Specification With Guidance for Use", is the replacement for BS7799-2. It is intended to provide the foundation for third party audit, and is 'harmonized' with other management standards, such as ISO 9001 and ISO 14001. The fundamental purpose of the ISO 27001 certification standard is to assist in establishing and maintaining an effectual information management system, using an incessant improvement approach.
According to JTC1/SC27, the ISO/IEC committee responsible for ISO27k and related standards, ISO/IEC 27001 “is intended to be suitable for several different types of use, including.
Use within organisations to formulate security requirements and objectives.
Use within organisations as a way to ensure that security risks are cost-effectively managed,
Use within organisations to ensure compliance with laws and regulations.
Use within an organisation as a process framework for the implementation and management of controls to ensure that the specific security objectives of an organisation are met.
The definition of new information security management processes.
Identification and clarification of existing information security management processes.
Use by the management of organisations to determine the status of information security management activities.
Use by the internal and external auditors of organisations to demonstrate the information security policies, directives and standards adopted by an organisation and determine the degree of compliance with those policies, directives and standards.
Use by organisations to provide relevant information about information security policies, directives, standards and procedures to trading partners and other organisations that they interact with for operational or commercial reasons.
Implementation of a business enabling information security.
Use by organisations to provide relevant information about information security to customers.”
As with BS7799-2, a robust audit and certification scheme supports the standard. For those already certified against BS7799, accredited certification bodies will establish transitional arrangements. More detail and explanation is available on our specific certification page.
To help our clients in expanding their business, we provide them with our gap analysis. Gap analysis is a tool that helps a company to compare its actual performance with its potential performance. At its core are two questions: "Where are we?" and "Where do we want to be?". If a company or organization is not making the best use of its current resources or is forgoing investment in capital or technology, then it may be producing or performing at a level below its potential. This concept is similar to the base case of being below one's production possibilities frontier. The goal of gap analysis is to identify the gap between the optimized allocation and integration of the inputs, and the current level of allocation. This helps provide the company with insight into areas which could be improved. The gap analysis process involves determining, documenting and approving the variance between business requirements and current capabilities.
Gap analysis naturally flows from benchmarking and other assessments. Once the general expectation of performance in the industry is understood, it is possible to compare that expectation with the company's current level of performance. This comparison becomes the gap analysis. Such analysis can be performed at the strategic or operational level of an organization.
The goal of gap analysis is to identify the gap between the optimized allocation and integration of the inputs, and the current level of allocation. This helps provide the company with insight into areas which could be improved. The gap analysis process involves determining, documenting and approving the variance between business requirements and current capabilities. Gap analysis naturally flows from benchmarking and other assessments. Once the general expectation of performance in the industry is understood, it is possible to compare that expectation with the company's current level of performance. This comparison becomes the gap analysis. Such analysis can be performed at the strategic or operational level of an organization.
Article Directory : http://www.articlecube.com
The ISO 9001:2008 (QMS) provided by OSS as a professional organisationiso 9001 certification in delhi which iso certifications services serving iso consultants certification services.
