ISO 27001

What is ISO 27001?

ISO 27001 (formally BS EN ISO/IEC 27001:2017) is the industry standard specification for an Information Security Management System (ISMS). ISO 27001 provides the most widely trusted model for establishing, implementing, operating, monitoring, reviewing maintaining and improving an information security management system.

ISO 27001 provides the following benefits:

Inspires trust in your business
Reduces business risks
Helps protect your business
Help you comply with regulations
Increases your competitive edge

Need help?

Please contact us to arrange a telephone or face-to-face appointment to discuss you needs.

Get in touch ▸

ISO 9001

We can also help with ISO 9001 ▸

More ISO Certifications

Explore more ISO certifications ▸

How can we help?

Spritzmonkey can provide the skills and knowledge required to deliver a successful programme to achieve and maintain certification in this standard.

We have a 100% successful track record of implementations achieving the certification, and provide a flexible, tailored, cost-effective service to provide you with the assistance you need in the way that you need it. This could be a fully outsourced project where we undertake all of the steps for you, or a coach and mentor approach where we work alongside your own internal team. No business is the same and we aim to tailor the service we provide to your specific needs.

From the outset we aim to build open and straightforward relationships with clients. By listening to you and adopting a flexible approach, we ensure that ISO 27001 works for you and is not a burden. We work with you to understand your business, how it works and its culture. That way, no matter what industry you are in, we can tailor our services to suit your needs and fit in with how you and your teams work.

Our technical background working in IT and Cyber Security across many different sizes and types of organisation means that we have the knowledge of best practice guidance and current threat landscape to not just understand the standards but as technical people we can apply them effectively to your business in a way that maximises the benefits.

By working with our experienced consultants:

You are more likely to succeed, as we use our tried and tested methods
It’s quicker and costs less than unaided projects
You can use our experience to avoid over complicating the process

Benefits of ISO 27001

ISO/IEC 27701 PIMS

ISO/IEC 27701 is an extension to ISO 27001 for Privacy Information Management Systems that provides guidance on the protection of privacy, including how organisations should manage personal information, and assists in demonstrating compliance with privacy regulations around the world.

If you are already ISO 27001-certified or looking to implement ISO 27001, we can help add the requirements of ISO 27701 so that you can build trust in managing personal information in a transparent way between stakeholders. This is applicable to all organisations who are acting as personal data controllers and processors, and will provide a framework for complying with the GDPR requirement for appropriate technical and organisational measures.

Note: This standard was previously known as ISO/IEC 27552 during the standards development process.

Other Compliance

Spritzmonkey can help with compliance to most information security and cyber security standards. We have successfully helped customers with ISO 9001, NHS Data Security and Protection Toolkit (DSPT) assessments, and reviews against NIST and SANS controls. We can also provide certification for Cyber Essentials and Cyber Essentials Plus.

Source: BSI ISO 27001 Features and Benefits Guide