ISO 27001 Information Security Management System

ISO/IEC 27001:2022 Information security, cybersecurity and privacy protection. Information security management

system. Requirements, to give it its full name, is considered by some to be ISO's flagship Management System Standard

(MSS). Certainly one of the more complex and resource heavy standards to implement, it provides organisations with a

framework by which to better protect the confidentiality, integrity, and availability of their information assets.

​

Implementation

Traditionally presented in a three-tiered format consisting of a policy manual, procedures, forms and records, an Information

Security Management System (ISMS) can be implemented in most instances within two months. A soft consultative approach ensures minimum disruption to your operational activities, and beyond answering only a few very basic questions during the development stages, Mathew Judge Ltd can provide your organisation with a non-invasive and seamless level of service from implementation through to certification.

Certification

Certification must be conducted by a UKAS accredited CB (Certifying Body) at external audit, a process which is split into two distinct stages; Stage 1 Document Review, and Stage 2 Site Review, also known as the Certification Audit. For most SME's, a total audit duration of four days is allotted by the CB for the assessment process, although for larger companies the required assessment duration may increase. Subject to external auditor availability, regardless of an organisations' perceived readiness or complexity, most ISMS' can be presented at external audit within one month after implementation, although UKAS themselves recommend that a management system be in-situ for at least three months prior to undergoing external assessment. Mathew Judge Ltd can provide your organisation with a personalised solution to suit your own unique business footprint, and can manage the entire process to guarantee certification, and so you can stay focussed on your own core activities with little to no interruption.

​

Maintenance

​

To maintain certification, your organisation will be subject to a recurring annual surveillance audit by the CB, primarily to assess the ISMS' ongoing suitability against the certification requirements of ISO 27001, but also to ensure the needs of the business and all interested parties continue to be met. To this end, you will need to make sure that all business objectives and targets remain current against the scope of your activities, and that all underlying processes continue to function adequately and improve as an ongoing concern. Mathew Judge Ltd can help you to meet all ongoing requirements, and help carry the burden that such assessments and recurring scrutiny can present.

​

Costs

​

Implementation

​

Implementation costs, i.e., those costs charged by us to implement an ISMS for your business, will vary depending not only on the scope of your activities, but also your organisation's current readiness. In every instance, we try to offer all our clients a realistic and cost effective solution that won't be seen as prohibitive towards obtaining certification. Call us today to learn how we can help your organisation attain certification quickly, and within budget.

​

Certification

​

Certification costs vary from one CB to the next, but we believe we can find you a manageable solution to suit your budget, including interest free instalment options for all new customers.

​

Take the next steps toward certification today by calling us on freephone 0800 689 3124, or by filling in our online support form here.

​

​

​

​