Iso 27001 Certification Services

ISO 27001, titled "Information Security Management - Specification With Guidance for Use", is the replacement for BS7799-2. It is intended to provide the foundation for third party audit, and is 'harmonized' with other management standards, such as ISO 9001 and ISO 14001.

The basic objective of the standard is to help establish and maintain an effective information management system, using a continual improvement approach. It implements OECD (Organization for Economic Cooperation and Development) principles, governing security of information and network systems.
ISO 27001 a Information Security Management System(ISMS)


What is Information?
Information is an asset which is essential to an organizationa s business and it needs to be protected. Protection is vital in the increasingly interconnected business environment. Interconnectivity leads to information being exposed to growing number and wider variety of threats and vulnerabilities. Forms of information are - printed, written, stored electronically, transmitted by post, email etc.

What is Information Security?

Information security is the protection of information to ensure:

a c Confidentiality: ensuring that the information is accessible only to those authorized to access it.
a c Integrity: ensuring that the information is accurate and complete and that the information is not
modified without authorization.