is actually "a comprehensive set of controls comprising best practices
in information security". It is essentially, in part (extended),
an internationally recognized generic information security standard.
Managing compliance with ISO27001 is a complex task. Assessing compliance
levels for information systems, and then deriving and implementing plans
to become compliant, can by a very intensive process. At PakCERT we
focus on the Security Audit Process to ensure business outcomes.
guide you through the entire compliance exercise. Section by section,
through a series of questionnaires, PakCERT takes you through the standard.
Following this, we create essential reports to:
your current compliance position with respect to each section
what your shortcomings are, with recommendations on what steps
are necessary to rectify these and achieve full compliance
will objectively and meticulously evaluate your position with respect
to ISO27001, generating appropriate solutions and recommendations for
every identified exception.
us to find out how PakCERT can help you achieve the ISO27001 compliance