ISO 27001:2005 Certification

ISO 27001:2005 defines the Information Technology Security Management System. It helps to secure the data of the organization. ITSMS provide the guideline to the organization on how to protect the information or data from the threats. It also provides guidelines on how to decrease the risk of information technology.

Benefits Of ISO 27001:2005

• Enhanced the IT business
• Builds the strong relationship between the IT and the client
• Decrease the risk
• Build up the trust factor among the organization
• Prevent  from the unauthorized physical access
• Maintain the availability.
• Protect and secure the organizational information from the hackers.
• Enhance the brand value and market value of the organization.
• Take preventing and corrective actions.
• Increase motivation among the employees.

Indicium Consultancy Road Map For ISO 27001:2005

• Assessment of Existing Resources including infrastructures
• Assessment of existing System & Identification of processes
• Identification of Task Group & Management Representative
• ISO 27001:2005 Awareness Training Program in batches
• Development of  Process Flow Charts, Policy, Objectives, Formats & other supporting documents (Work Instructions etc)
• Finalization of above documents & release for implementation
• Preliminary Audit (Gap Analysis) & revisions to documents
• Design & Development of Quality Manual & issue draft for review
• Finalization of Manual  & issue documents for implementation
• Implementation of Quality Management System
• Provision of Identified Resources
• Qualification of processes & personnel for specICPL processes
• Calibration of Monitoring & Measuring Instruments
• Selection & Finalization of Certification Body
• Training of Internal auditors in two batches if > 20
• Audit by ICPL Auditor and Management Review Meeting – I
• Implementation of Corrective & Preventive Actions
• Submission of Quality Manual to Certification Body for review
• Corrective & Preventive Action on review comments
• Audit by ICPL  and Management Review–II
• Corrective Action on Internal Audit
• Preparation for Certification Audit
• Final Audit by Certification Body
• Implementation of Corrective & Preventive Actions
• Award of certificate by certification body