IT GOVERNANCE AND COMPLIANCE
ISO/IEC 27001 is an international standard which describes and gives specific requirements for an Information Security Management System
Implementing an ISMS helps a company in the reduction of technology-based risks and revenue losses, while improving the image of your business.
IT GOVERNANCE AND COMPLIANCE
ISO 27001:2013 GAP ANALYSIS
- Gap analysis and compliance assessment with respect to the ISO/IEC 27001:2013 standard.
- ISO 27001: requirement identification
- Gap analysis report
- Team manager interview
- Remediation plan including compliance timeline
IT GOVERNANCE AND COMPLIANCE
SECURITY IT ASSESSMENT
-
Security IT Assessment with a focus on the main operative business processes
- Team manager interview
- Main business asset identification; valorization in terms of priority and critical impacts.
- Network vulnerability assessment