Adwisery experts have launched an ISO/IEC 27001:2022 Information Security Management System implementation and certification readiness project for a company in the digital learning services sector

During the project, experts:

• Will carry out the compliance GAP analysis and prepare the Statement of Applicability;
• Will prepare drafts of the Information Security Policy and ISMS procedures and processes;
• Will perform the information security risk assessment;
• Will prepare the ISMS monitoring, measurement, and control plan;
• Will prepare the Business Continuity Management Plan;
• Will organise training for employees and internal auditors;
• Will conduct the internal ISMS audit and perform the Management Review in line with ISO 27001 requirements;
• Will provide support during the certification readiness phase and throughout the certification audit.

Purpose:

• The Client seeks to strengthen information security and cybersecurity management and to meet the security expectations arising from the obligation, established by legislation, for cybersecurity subjects to properly manage their supply chain. In order to meet these security requirements set by supply chain partners, the Client aims to update and reinforce the Information Security Management System (ISMS), aligning it with the requirements of the ISO/IEC 27001:2022 standard.

Benefits:

• The Client will strengthen information security management, increase organisational reliability within the supply chain, and meet the security expectations that cybersecurity subjects apply to their partners and service providers. The work carried out will enable systematic risk management, ensure the secure provision of digital services, and clearly demonstrate the organisation’s security maturity to existing and potential clients, while also providing a competitive advantage.

Estimated duration of service: