Information Security (IS) also known as Cyber Security is the practice of preventing unauthorised:

• access

• use

• disclosure

• disruption

• modification

• inspection

• recording

 

and destruction of information. It is a general term which can be used regardless of the format of data.

​

Threats to information security come in many different forms. Today, the most common threats are software attacks; theft of intellectual property; identity theft and theft of equipment.

The prevalence of software attacks such as viruses, worms, phishing and Trojan horses, mean that most people have experienced an attack on their information security at some point, as have many businesses, with theft of intellectual property being a significant issue.

​

​

​

​

​

​

​

​

​

​

​

​

 

 

A system which helps organisations combat against such threats is referred to as an Information Security Management System (ISMS). Effectively, this is a set of policies, processes, procedures, practices and behaviours for systematically managing an organisation’s sensitive data. The goal of an ISMS is to minimise risk and ensure business continuity by pro-actively limiting both the likelihood and impact of an information security breach.

​

An ISMS typically addresses employee behaviour and processes as well as data and technology. It can be targeted towards a type of data, i.e. customer data, or it can be implemented in a comprehensive way with the goal of becoming part of a company’s culture.

Many organisations utilise the specification standard ISO 27001 in order to create an ISMS.

 

What is ISO 27001?

ISO 27001 provides the framework for an effective Information Security Management System (ISMS). It sets out the policies and processes/procedures needed to protect an organisation. It includes all the risk controls (legal, physical and technical) necessary to demonstrate robust Information Security Management.

​

What are the benefits of ISO 27001 certification?

The ‘International Organization for Standardization’ (ISO) developed its 27001 standard to give organisations an effective way of “establishing, implementing, maintaining and improving an information security management system” and with its adoption globally, it is now one of the most popular management standards worldwide.

​

The ISO 27001 Information Security Management System focuses on developing systems to secure all forms of data. It helps you protect company and client confidentiality and manage the availability of sensitive information, regardless of where that information is held. Certification to ISO 27001 quite simply demonstrates that your business has the systems, controls and behaviors in place to combat cyber-attacks and other threats to data integrity.

​

Client organisations are increasingly asking suppliers and other contractors to confirm they are certified to ISO 27001, before inviting them to tender or contract with them. Implementing the standard prevents costly and embarrassing security breaches that disrupt a business and damage their brand.

​

How can ISO 27001 compliance protect your business?

Any organisation: whatever its size, sector or structure, can benefit from implementing an ISMS. Gaining certification to ISO 27001 simply allows an organisation to demonstrate the independent assessment of its internal processes.

​

How can the ISO 27001:2013 standard strengthen your Information Security Management?

By implementing ISO 27001:2013, with support from our BMS consultants, an organisation will establish robust processes and procedures to prevent data security breaches and data theft. Backed up by independent assessment and verification activity, ISO 27001 demonstrates to customers and stakeholders that their privacy is important.