ISMS Operation and Ongoing Support

Ongoing ISMS support may include:

• Maintaining and updating the ISMS documentation
• Reviewing the scope of the ISMS
• Updating risk assessments
• Monitoring the risk treatment plan
• Maintaining the Statement of Applicability
• Reviewing security controls and control activities
• Evaluating information security objectives and key performance indicators
• Following up outstanding actions

• Supporting the handling of information security incidents
• Assessing significant organisational and technical changes
• Conducting or supporting internal audits
• Preparing and documenting the management review
• Planning and delivering training courses
• Preparing for surveillance and recertification audits
• Addressing findings and implementing corrective actions

Our support can be adapted to your organisation’s actual requirements. Possible models include:

• Ad hoc consulting on individual issues
• Regular monthly or quarterly support
• Support for the internal Information Security Officer
• Full coordination of ongoing ISMS activities
• Time-limited follow-up support after initial certification

Regular status and management reports provide transparency regarding risks, measures, controls and the current maturity level of the ISMS.

The objective of ongoing support is to regularly assess the operational effectiveness of the management system, implement necessary improvements and help maintain the organisation’s certification readiness.

We help you keep your ISMS effective, up to date and practical after certification.