Contact GTS

ISO27001 Technical Consulting Services

1. ISO27001 Certification Introduction:

ISO27001 is a management system standard in the field of information security, similar to the ISO9000 standard for quality management system certification. When your organization passes ISO27001 certification, it is equivalent to passing ISO9000 quality certification, indicating that your organization's information security management has established a scientific and effective management system as a guarantee. ISO27001 certification - Information Security Management System (ISO27001 Information Security Management System) is one of the world's recognized effective methods for addressing information security.

2. ISO27001 Certification Technical Consulting Service Process

Stage 1: Current Situation Research
Research the current security status of your company's information security management from daily operations, management mechanisms, system configuration, etc. Through training, enable relevant personnel to comprehensively understand the basic knowledge of information security management.

Includes:
(1) Project Launch: Preliminary communication, implementation plan, project team, resource support, kick-off meeting.
(2) Preliminary Training: Information security management basics, risk assessment methods.
(3) Current Status Assessment: Preliminary understanding of the current information security status, analysis of gaps with ISO27001 standard requirements.
(4) Business Analysis: Interview survey, core and support business, business resource requirements, business impact analysis.

Stage 2: Risk Assessment
Conduct asset value, threat factors, and vulnerability analysis of your company's information assets to assess information security risks, and select appropriate measures and methods to achieve the purpose of risk management.
(1) Asset Identification: Identify various information assets of your company.
(2) Risk Assessment: Important assets, threats, weaknesses, risk identification and assessment.