Information Security Management Consultancy

ISO 27001 gap analysis

A gap analysis objectively assesses how closely your current system meets ISO 27001 requirements.

Our ISMS consultant will review your management system and provide a written report detailing where your system does and does not conform to ISO 27001. The report findings can be used to develop an ISMS implementation plan.

Find out more

Developing ISMS documentation

ISO 27001 outlines the requirements for documented information including the ISMS scope, policy and the information security objectives.

Our ISO 27001 consultants can create documentation on your behalf, review your current documentation or advise on specified documentation you require support with.

Find out more

ISO 27001 training programme

By creating and implementing a tailored ISMS training programme, organisations can become fully independent in managing their IMS for ISO 27001 certification and continuous improvement.

Our consultants can guide you through our ISO 27001 training courses, including CQI and IRCA certified ISO 27001 Lead Auditor and ISO 27001 Internal Auditor training, available across the UK, online, and on a dedicated basis at your organisation.

Find out more

Information security risk assessment

ISO 27001 requires organisations to define and apply an information security assessment process.

Our information security consultants can provide support establishing your information security risk criteria and identifying, analysing and evaluating the information security risks to ensure compliance with ISO 27001. A report with findings and recommendations will be provided on completion.

Information security risk treatment

Clause 6.1.3 outlines the requirements for organisations to define and apply an information security risk treatment process. Annex A contains a list of control objectives and controls to ensure no necessary controls are overlooked.

Our experienced consultants, including Lead Auditors and Lead Implementers, can provide support selecting appropriate information security risk treatment options, determining controls and formulating an information security risk treatment plan.

Nonconformities and corrective action

Clause 10 of ISO 27001 outlines the requirements in relation to nonconformities and corrective actions. Organisations are required to react to the nonconformity and eliminate the cause to prevent reoccurrence.

If nonconformities were identified during your audit our consultants can provide advice and support in implementing corrective actions to address these, ensuring the results of these actions comply with the requirements of ISO 27001.