ISO / IEC 27001:2005 Information Security Management Systems
Description
The basic processes of any organization are based on information systems. Any event that affects the integrity, confidentiality and availability of information could jeopardize business continuity and for this reason it has to be managed under contrasting standards internationally.
What we do
The methodology developed by Zitec Consultants for the design, elaboration and implantation of the SGSI will allow the Organization to certify itself according to the standard ISO / IEC 27001:2005 Information Security Management Systems, the main reference at worldwide level in information security.
- Knowledge of the demands in information security of the organization and the necessity to establish a policy and adequate objectives.
- Establish an adequate policy and objectives.
- Elaboration of a risks analysis and selection of applicable controls to manage the information security risks within the context of business global risks of the organization.
- Supervision and review of the SGSI performance and effectiveness.
- Continuous improvement on the base of objective measures.
- Improvement of the external image.
Results – Success cases
From Zitec Consultants we have successfully implemented the demanded requirements by ISO /IEC 27001:2005 in Organizations of different business areas.
