Implementing ISO 27001

ISO 27001 is the international best practice Information Security Management Standard (ISMS). This page provides everything you need to help you implement an ISO 27001 ISMS, in any sector, in any organisation, anywhere in the world. You can find out more about ISO 27001 here, or its forerunner BS77999 here.

What is on this page:

Free Introductory White Paper – A fantastic resource for those new to ISO 27001
Getting Started – Introductory books
Training Courses – Courses for ISO 27001 beginners or experts
Risk Assessment & vsRisk – Risk Assessment is a core component for any ISO 27001 project
Consultancy – ITG's proven consultancy service
Fast Track Consultancy – We can have you ready for UKAS certification in 3 months!
Toolkits – Essential tools for implementation

Free Introductory White Paper

Are you new to ISO 27001? Our free introductory paper is a fantastic resource to build your knowledge and understanding of this complex issue. Provide your details below and we will email you a copy.

Getting Started

The best idea for any individual or organisation interested in ISO 27001 is to gain an understanding of the Standard. Background reading is essential in order to understand the principles of the Standard, how it can help your organisation and what approach would be suitable for your ISO 27001 project. For those new to ISO 27001, IT Governance recommends reading the following books:

The Case for ISO 27001 – This book offers a comprehensive description of the benefits of ISO 27001. It is designed to help management make an informed decision when embarking on an ISO 27001 project.
Nine Steps to Success
– This book is a high level ISMS implementation overview. It advises what approach is suitable for your ISO 27001 project.
IT Governance: a Manager's Guide to Data Security and ISO 27001 / ISO 27002 – This book is the world premier guide on ISO 27001 project management. It is the Open University's post-graduate information security text book.

Training Courses

ISO 27001 training courses are ideal for those who have a basic understanding of ISO 27001. ISO 27001 is a complex issue and training courses provide that face-to-face learning which can help individuals clearly understand the principles of the Standard.

Highly trained course leaders can bring clarity to complex issues and pass on knowledge which has been accrued from years of training. Additionally, individuals on the course, will be on the course with other delegates who are in a similar position to themselves. It is extremely beneficial for delegates to learn from each other and share the real world examples that they are experiencing in their own ISO 27001 project.

Implementing any ISO 27001 project is going to require some training. IT Governance offers a wide range of courses, ranging from foundation to master level. IT Governance can also provide tailored in-house training and assist clients in acquiring the appropriate Information Security Qualifications. Here are links to the most important ISO 27001 courses:

All available courses – A comprehensive list of all courses IT Governance offers
ISMS Foundation – An ideal starting point for someone new to ISO 27001
ISO 27001 Certified ISMS Lead Implementer Class – Ideal for ISMS Project Managers and Implementation team members
ISO 27001 Certified ISMS Internal Auditor – Ideal for anyone involved in auditing an ISO 27001 management system

Risk Assessment & vsRisk

Risk assessment is the core competence of information security management. The vsRisk tool is the definitive risk assessment tool and assesses risks on a structured, asset-by-asset basis and helps automate and simplify this complex process. Below are links to our vsRisk products and our Risk Assessment page where you can find out more information on this subject:

vsRisk – ISO 27001:2005 Compliant Information Security Risk Assessment Tool – The definitive risk assessment tool
vsRisk - Consultant Edition – A version of vsRisk that enables information security consultants to deploy vsRisk in up to 10 different clients
Our Risk Assessment for ISO27001 Page

Consultancy

Our consultancy services are ideal for those who understand ISO 27001 and want to start an ISO 27001 project, but, do not have the technical expertise or resources to undertake the project themselves.

Our consultancy services can assist organisations in every step of the process, including how to sell the project to the Board and planning each step methodically. An ISO 27001 project is no small undertaking. Having expert consultants on board, with years of experience in implementing ISO 27001 projects for clients worldwide, will ensure your project is delivered on time and within budget.

Our ISO27001 consultancy service uses methods and techniques that have been developed over 10 years. We can assist any organisation plan, implement and deliver a successful ISO27001 project.

Our implementation method is pragmatic, proven and straightforward. We also offer a free initial assessment.

To discuss ISO27001 consultancy you can call us today on 0845 0701750 or email us.

Fast Track Consultancy

IT Governance offers a Fast Track ISO 27001 consultancy service that will have your organisation ready for UKAS-accredited certification in just 3 months! From inception to completion of your ISO 27001 project, IT Governance will guide your organisation toward successful certification, utilising an implementation approach and methodology which is realistic, proven and straightforward.

Our Fast Track service is available for:

Organisations with 19 employees or fewer, and
Organisations which are based at a single location
A one off payment of £5,000 (plus expenses at cost and VAT)
Please note that our free does not include certification costs, these are charged by the certification board.

To visit our designated Fast Track consultancy page click here.

To discuss Fast Track consultancy with one of our team email us or call +44 (0)845 070 1750.

Toolkits

ISMS toolkits are ideal for those organisations that have a solid understanding of ISO 27001, want to implement ISO 27001 and have a clearly defined project plan. Toolkits provide easy to follow tools and documents to make you a master of your own ISO 27001 project. Toolkits include fit-for-purpose policies and procedures, which can easily be adapted to your organisation. What is more, toolkits offer a far more affordable option than consultancy services.

The ISMS Toolkits can save you months of time and money and accelerate your ISO 27001 project.

See the full range of ISMS Toolkits available

Untitled Page