ISMS implementation with ISO27001 certificate

An ISO27001 certificate for small IT companies. Really?

Yep, it's possible and it can be the decisive step for IT service providers, for example. Maybe you already have information security under control in your company with a security process or a ISMS? Then it's time to think about ISO27001 certification, because just then the road is not far!

The issue:
You want or need to introduce an ISMS according to ISO27001 and have it certified, e.g. because end customers demand it or because you want to hold your own against certified competitors. The certification should be carried out in a resource-saving way and with a manageable expenditure.

The solution: ISO27001 from the IT professional
Let me advise you as an experienced ISO27001 auditor and IT pro who understands your processes. To accompany you and your employees during the certification process is my claim. In one or more workshops, I will make you fit for the "ISO project". Together we take a pragmatic approach, relying on best practices that have proven themselves in the IT industry.

Approach

First, we develop all the documents required by the standard. I bring in the required document templates and we adapt the texts to your individual requirements and operational context. With the help of a GAP analysis, which takes into account all the measures from Annex A of the ISO27001 standard, an action list is drawn up for implementation.

The next step is to implement and work through the action list. If necessary, processes are adapted or newly introduced (e.g. a process for internal audits if this does not yet exist), employees are trained and a first system audit is conducted and documented.

Finally, I moderate you through the management assessment and prepare the company optimally for the certification audit. If desired, I can also support you further after certification with internal audits or risk management.

My services
• Teaching all the basics of an ISMS according to ISO27001
• Assistance with the planning and implementation of the project
• Preparation of system documentation
• Support in the implementation of pragmatic and lean management processes
• Coaching and moderation of management and staff
• Internal audit for the assessment of certification readiness included
• Support in the selection of a certifier
• Combination with QM according to ISO9001 as an integrated management system is possible.

Your benefits

Further information

Would you like a no-obligation initial meeting or a personal consultation?
A simple request is all it takes!
Call me: 06423 963 410 or write to: info(at)vangestel.de