ISO/IEC 27001
Certification in Management System for Information Security
CERTIFICATION
ISO/IEC 27001
Information Security Management System
The international standard ISO/IEC 27001 provides the requirements to establish, implement, maintain, and continuously improve an information security management system (ISMS) within the context of the organization. Thus, providing security, confidentiality, integrity, fraud prevention and availability of information, both from its customers and suppliers as well as from its employees.
The requirements of this international standard are generic and are intended to be applicable to all types of organization, regardless of their size, sector, or nature.
ISO/IEC 27001 SYSTEM REQUIEREMENTS
The following requirements are mandatory to show compliance with the information security management system.
4. Context of the organization.
5. Leadership.
6. Planning.
7. Support.
8. Operation.
9. Performance evaluation.
10. Improvement.
The exclusion of any of the above requirements is not acceptable when an organization claims conformance to this International Standard.
ADDITIONAL REQUIREMENTS
- Maintain a documented system in accordance with the applicable standard.
- Keep the scope of the certification clearly defined.
- Maintain evidence of implementation of the management system for at least 3 months. *Recommendation.
- Maintain internal auditors with the competence to perform internal audits.
- Maintain records related to at least one internal audit.
- Maintain evidence of the implementation related to documented processes, record control, actions taken, internal audits, risk analysis, among others.
- Maintain records related to management's commitment, where compliance with all the requirements established by the applicable standard for said review is ensured.
- Ensure that the defined policy and objectives are related and documented in accordance with the requirements of the applicable standard.
INTERNATIONAL RECOGNITION
Our certificates are accepted everywhere in the world
BENEFITS
Addressing information security through an ISMS provides several benefits and competitive advantages for the organization:
Reduction of the risk of information loss.
Integration in conjunction with other management systems such as those based on ISO 9001, ISO 14001, among others.
It allows communicating to customers, suppliers, and interest groups that the organization is committed to information security.
Protect the company's reputation and corporate image.
Adjusts to the needs of each company.
HOW TO BE CERTIFIED?
Process to obtain an international certificate with Global Standards
The certification process pays attention to every detail to make sure that the company duly complies with all of the standard’s requirements.
1
Quote and signing of the contract
2
Planning and Development of Audit
3
Closing of Non-Conformities
4
Certification Committee and Issuance of the Certificate
PRÓXIMOS CURSOS