DIN EN ISO/IEC 27001 — Information security
ISO/IEC 27001 is the leading international standard for information security management systems (ISMS). NIS2 and growing customer demand for security evidence make it increasingly important.
What does the standard cover?
The standard requires an ISMS with systematic risk assessment and treatment, plus suitable Annex A controls, from access control and cryptography to supplier management. It enables businesses to demonstrate an appropriate security level to customers, regulators and in the context of NIS2.
Who is the standard relevant to?
- Companies required by NIS2 to implement an ISMS
- IT service providers whose customers require ISO 27001 certification
- Organisations seeking systematic protection of sensitive data and systems
Our services
Developing the ISMS
We develop an information security management system suited to your IT environment and processes.
Risk assessment and treatment
We identify and assess information security risks and define effective treatment measures.
Implementing Annex A controls
We implement the relevant Annex A controls and document them for audit purposes.
The certification process
- 1Risk assessment: identify threats and protection needs
- 2Developing the ISMS and selecting Annex A controls
- 3Internal audit and management review
- 4Certification audit with our support
DIN EN ISO/IEC 27001 implementation in your business
We assess your current maturity and draw up a realistic roadmap, free of charge and without obligation.
Request advice