Alangh Infosec Menu

Compliance & Certification

ISO 27001 & ISO 22301

Build, run and certify an information security management system (ISO 27001) and a business continuity management system (ISO 22301).

Discuss this service All services
PLANDOCHECKACT

Overview

ISO 27001 is the international standard for an information security management system (ISMS). It sets out how to establish, implement, maintain and continually improve a systematic approach to protecting sensitive information.

ISO 22301 is the international standard for business continuity management. A business continuity management system (BCMS) helps your organization keep operating during and after a disruption.

We tailor both programs to your organization, whether you are a startup or a large enterprise, and design them to scale as you grow.

Scope

What the service covers

01ISO 27001: information security

  1. Gap analysis

    Assessing your infrastructure, applications and devices against ISO 27001 and recommending fixes.

  2. Risk assessment

    Identifying information security risks and recommending ways to reduce them.

  3. ISMS implementation

    Policies and procedures, risk management, asset management, access control and incident response.

  4. Internal audits

    Checking that your ISMS operates effectively and meets the standard.

  5. Certification audit support

    Preparing you for the certification audit and working with the certification body.

02ISO 22301: business continuity

  1. Business impact analysis

    Identifying the critical functions and processes that must continue during a disruption.

  2. Risk assessment

    Assessing continuity risks and recommending ways to reduce them.

  3. BCMS implementation

    Policies and procedures, risk management, continuity planning and incident response.

  4. Internal audits

    Checking that your BCMS operates effectively and meets the standard.

  5. Certification audit support

    Preparing you for the certification audit and working with the certification body.

Engagement

How an engagement works

  1. 01

    Gap analysis

    Measure where you stand today against the standard.

  2. 02

    Risk assessment

    Identify and prioritize the risks the management system must address.

  3. 03

    Implementation

    Put the required policies, procedures and controls in place.

  4. 04

    Internal audit

    Confirm the system works as designed before the external audit.

  5. 05

    Certification audit

    Prepare for and support you through the certification body’s audit.

Outcomes

Why it matters

  • Show customers and stakeholders that you take information security seriously
  • Demonstrate you are prepared to manage disruptions and keep delivering essential services
  • Support compliance with regulatory requirements on security and continuity

Compliance & Certification

GDPR

Understand the personal data you hold and put a practical GDPR compliance program in place.

HIPAA, HITRUST

Protect patient health information and meet HIPAA and HITRUST requirements with a structured compliance program.

You build, we protect

Talk to us about ISO 27001, 22301

Tell us about your environment and goals, and we will suggest a practical scope.

Start a conversation Explore services
info@alangh.com