ISO 27001 Information Security Policy

ISO 27001 is an ISO standard about information security, which you can use to build an Information Security Management System that will help you keep your information confidential, available, complete and accurate. If you’re new to ISO 27001 and management system standards, read our blog What is an Information Security Management System (ISMS) and how does it relate to ISO 27001?

Over the years our ISO consultants have developed a set of tools, templates and techniques to help our clients achieve ISO 27001 as quickly, hassle-free and economically as possible.

We’ve developed a process, containing all the steps to achieving certification. The compliance checklist is one of those tools.

The certification process for ISO 27001 requires two audits to take place, 2-3 months apart. 

• The first audit (Stage 1) verifies that the documentation you have put in place conforms to the standard to make sure all requirements are covered;  
• The second audit (Stage 2) verifies that the controls are in place and working, policies and procedures are adhered to and ISMS activities are being tracked and implemented.