The purpose of the ISO27001 Information Security Management System is to help preserve the confidentiality, integrity, and the availability of your critical business information assets.

Confidentiality refers to limiting access and disclosure of information to authorized users, and preventing access by or disclosure to unauthorized users.

We all have a bank account, and the bank has sensitive personal information about us, so we obviously want to know that only authorized people at the bank has access to our banking and personal information.

Integrity refers to upholding and ensuring the accuracy and reliability of data over its entire life-cycle. This is a critical aspect to the design, implementation and usage of any system which stores, processes or retrieves critical data.

If we are sending an online money transfer of $1,000 but the information was tampered with so we actually sent $10,000 it can prove very costly! You want to be confident that the right amount is...

Getting certified for ISO 27001 Information Security Management Systems Standard can sound daunting. Understanding, achieving and maintaining accredited certification to the international standard for information security management, ISO 27001, can be a complicated job, especially if you are new to the standard. However, it is not as difficult as the rumours make it out to be!

Let us kill some of the myths about ISO 27001 for you, so you don’t have to worry!

1.     ISO27001 requires a massive investment in technology and other resources

2.     It requires a large amount of documentation

3.     It takes a long time to implement the standard

4.     The standard imposes new constraints on business

Luckily, NONE of these are true!

An organisation can implement an effective ISO 27001 information security management system with very little investment. Most businesses today...