ISO 27001 offers a comprehensive approach to information security. Information assets that must be protected according to this standard range from digital information, paper information and physical assets (computers and networks) to knowledge that is present in individual employees. Areas of attention range from competence development of employees to technical protection against computer fraud.
The ISO 27001 standard provides organizations with a process-oriented approach for setting up, implementing, managing, monitoring, evaluating, maintaining and improving the information security management system.
All organisations that deal with the storage, processing or exchange of information can be certified against the information security standard ISO 27001. ISO 27001 is applicable for organisations in the commercial, non-profit, government and healthcare sectors.
More information? Contact us!