Establishment and Implementation of the ISMS including Project Management

Our services include:

• Defining the scope of the ISMS
• Analysing the organisational context and relevant requirements
• Identifying interested parties
• Establishing the ISMS governance structure
• Defining roles and responsibilities
• Developing the information security policy
• Establishing the information security risk management process
• Conducting and documenting risk assessments

• Developing a risk treatment plan
• Selecting and evaluating appropriate security controls
• Preparing and maintaining the Statement of Applicability
• Developing the required policies and process descriptions
• Defining information security objectives and key performance indicators
• Establishing appropriate control and evidence processes
• Training and raising awareness among employees

Existing processes, policies and management systems are integrated wherever possible to avoid unnecessary duplication.

An ISO 27001 project usually involves several departments and responsible persons. We coordinate the parties involved and support the structured implementation of the agreed measures. Project management may include:

• Preparing and maintaining the project plan
• Organising project meetings and workshops
• Coordinating management, the Information Security Officer, IT and specialist departments
• Monitoring tasks, deadlines and milestones
• Documenting project progress
• Escalating delays or obstacles at an early stage
• Providing regular status reports to project management and senior Management

You decide which tasks will be performed internally and which services will be provided by us. This allows the project to be adapted to the organisation’s available personnel, expertise and resources.

Together, we develop an effective, transparent and practical ISMS that can be applied in day-to-day operations. If you're interested, please feel free to contact us—it's free and there's no obligation.