Skip to content

ISO 27001

Do you process personal data that you can not afford to lose? Or information that you absolutely want to protect? This certification is for you!

ISO 27001 ?

ISO/IEC 27001:2013 is one of the leading international reference standards for information security. This standard is intended to apply to any organisation, in whole or in part, regardless of its type, size or nature.

As a first step, the organisation must identify the information which is absolutely necessary to protect, by its nature or value. 

Secondly, the goal is to set up a framework and management tools around this information, i.e. an Information Security Management System (ISMS).

Contrary to what one might think, information security management is not limited to IT security, although very relevant in these times. It covers all areas related to the information and the management of its security:

  • Security of human resources
  • Risk management
  • Access management, both physical and logical
  • Security of the premises
  • Compliance with all applicable laws and regulations
  • Incident management
  • Confirmed commitment of management, notably through the financial and human resources it allocates to information security, etc.

Why your organisation needs ISO/IEC 27001:2013 certification?

Phishing

Training and awareness raising through click campaigns

Like everyone else, you’ve already become a millionaire according to that email you’ve received and all you had to do was click on a link. While it was obvious for you not to click, but what about your employees? Moreover, phishing emails are becoming more and more sophisticated, especially when the email address of the HR or the CEO have been imitated (Fake President).

The consequences are numerous and heavy when you think about a possible paralysis of your activities, but also about the blow to your reputation can take. We are talking about phishing, ransomware, data leakage or data theft.

Don’t waste any more time, get your entire organisation trained and tested continuously!

How to ensure this "continuous improvement"?

The foundation of continuous improvement, the PDCA (Plan – Do – Check – Act) is a widely used method for improving an organization’s performance in several areas (HR, Marketing, Logistics, etc.). It is also known as a virtuous circle. This method breaks down as follows:

PDCA sequal

In addition to this, you will benefit from regular audits throughout the year,
that will bring you control, expertise and new opportunities.