TOP TIPS

10 'must haves' for Complying with ISO27001

  1. Dedicated Security Manager
  2. Information Asset Register
  3. Information Security Policy
  4. Risk Assessments
  5. Security Awareness Training
  6. Starters Policy
  7. Leavers Policy
  8. Physical Security Reviews
  9. Business Continuity Plan
  10. Documented Policies and Procedures

Private Sector

Supplying to the Public Sector?

The need to secure public sector information is high on the Government’s agenda, be it relating to central or local government, NHS, Police or Education, and no-one wants to be headline news because of an information security breach.

Consequently, more and more public sector departments, agencies and organisations are outsourcing all or part of their data management requirements and putting the onus on suppliers to implement the appropriate security measures. That could mean the onus is on you!

If you are providing services such as network or website hosting, managed services, research database management, personnel systems, payment card/finance solutions – in fact any service where you are storing, managing or processing public sector information – you may be asked to show compliance or certification to ISO 27001 or HMG Information Assurance Standard No.2 (IAS2).

If you haven’t seen these buzz words on PQQs, ITTs or Contract Terms & Conditions yet – you will!  We are assisting more Private Sector suppliers to the Public Sector than ever before with ISO 27001, SPF and CLAS consultancy services.

So why not stay one step ahead of your competitors? Call us now on 0121 559 6699 to find out how we can help your organisation grow its public sector client base. And don’t forget, as vendor independent consultants our assistance is completely unbiased and can often save you money.