ISO27001 Information Security Management Requirements
ISO/IEC27001 is the predecessor of the British BS7799 standard, which was proposed by the British Standards Institution (BSI) in February 1995 and revised in May 1995. In 1999, BSI reissued the standard. BS7799 is divided into two parts: BS7799-1, Information Security Management Implementation Guidelines; BS7799-2, Information Security Management System Requirements. The first part provides recommendations for information security management, intended for persons responsible for starting, implementing, or maintaining security in their organization; the second part outlines the requirements for establishing, implementing, and documenting an information security management system (ISMS), specifying the security controls that should be implemented according to the needs of independent organizations.
Consulting Services Content
1. Enterprise Authentication Preliminary Assessment:
- a) Analyze the current status of enterprise management, conduct differential analysis based on information security system requirements, and issue a report;
- b) Assist in establishing certification plans;
2. System Planning:
- a) Assist in establishing information security management policies, objectives, and purposes.
- b) Establish a risk assessment method based on risk analysis, training employees to identify assets, estimate risks, and take disposal measures.
- c) Assist in establishing information security management organization structures and responsibility assignments for the enterprise.
3. Training:
- a) System standard training；
- b) File writing training；
- c) Employee safety awareness training；
- d) System implementation and promotion training；
4. System File Compilation and Release Guidance:
- a) File list issuance；
- b) Guidance on writing；
- c) Full process guidance on file release (review, modification, approval, release)
5. System Operation Guidance:
- a) System implementation process training and trial operation guidance；
- b) Assist in formulating corrective measures based on operational conditions;
- c) Guidance on internal audit plan formulation, supervision of internal audit implementation；
6. Management Review:
- a) Assistance in establishing and facilitating management review plans；
- b) Supervision of rectification measure completion，
7. Certification Assistance:
Preparation of documentation and assistance with certification applications;
8. On-site Audit Assistance:
Problem rectification suggestions.
Service Hotline：0755-23722370 / Anna.Chan13823706750 / King.huang18025443654 / Sally.Wei18165707930
We will provide you with professional certification advice and services to ensure the smooth entry of your products into the local market
