ISO 27001 Certification – Information Security Management Systems Certification
Managing the risks associated with operating a business in the digital age.
ISO 27001 Information Security is a widely known information security management system (ISMS) standard, however, there are many other standards in the ISO 27000 certification family.
These standards allow companies to manage the security of their assets such as safeguarding from unauthorised access, use, destruction, modification or disclosure. Information Security is an essential component to the successful operation of any organisation.
Compass Assurance Services is accredited by JAS-ANZ to certify ISO 27001 Information Security Management Systems, our accreditation number is M5310713AO
Check out our ISO27001:2022 transition page below for information relating to the changes to the Information Security Standard. Additionally you can see how the new standard affects organisations currently certified to ISO27001:2013
Request a Quick Quote
Request an obligation free quote today, tailored specifically to your business’ certification needs and industry.
Get Your ISO Checklist
Contact Us
What is ISO 27001 Information Security?
ISO 27001 certification is part of the ISO 27000 certification family and includes requirements for the assessment and treatment of information security risks tailored to the needs of the organisation. It’s not all about risk though.
Why do I need ISO 27001 Certification?
The adoption of the certification processes gives you, your employees, regulators and clients the confidence that your information security risks are known and adequately managed.
What are the benefits of ISO 27001 Certification?
Companies often initially seek ISO 27001 certification for external reasons such as getting on preferred supplier’s lists, improving company image and responding to customer demands. The benefits of this are obvious – more work.
How can I get ISO 27001 certified?
Getting ISO 27001 certification is a lot easier than you might think, We take you through the three step audit process from your initial enquiry to the final certification decision.
ISO 27001 Certification Throughout America
Compass Assurance Services is able to certify businesses throughout America
Have you looked at our ISO 27001 self assessment checklist yet?
We worked hard so you don’t have to. Our checklists break down the standard in plain English so you can understand the requirements for ISO 27001 certification and what your business needs to do to get certified.
ISO27001 Information Security Key Concerns
As organisations have become more connected with increased information flows productivity has improved dramatically. The flip side to all this is that we are now more reliant on this data and information than ever before. If our organisations data becomes corrupted, destroyed or falls into the wrong hands it can have serious commercial and legal consequences.
The adoption of an information security management system is a strategic decision for an organisation; it demonstrates a commitment to managing information appropriately and responsibly.
ISO27001 certification provides you with an independent endorsement that your commitment to information security meets international standards. Clients, partners and other stakeholders can have confidence that your systems to protect information are appropriate, effective and have been audited regularly. ISO27001 certification may help you access markets, grow your client base and improve your systems.
That’s where Compass Assurance Services comes in. We get it.
Determining the scope of your Information Security Management is an important initial consideration as is gaining a sound understanding of the needs and expectations of your stakeholders.
Eliminating all information security risk from your business is probably not achievable. The controls adopted should be proportional to the level of risk. One could implement very onerous controls in order to bring risk ratings down to a bare minimum only to find that we are no longer able to conduct business effectively. The key to it all is balance, and an awareness of what risks are out there.
Compass Assurance Services has experienced auditors with practical experience; we are able to work through the process, and the risk methodologies and controls you have applied to managing information security.
• You will have confidence that your processes to address your regulatory and legal obligations are appropriate
• You will have gained a powerful marketing tool, which may help you win new clients, enter new markets or put you in a different league to that of your competitors.
You will have gained significant insights into how your business manages one of its most valuable commodities – information.
Four ways to protect your Information Security
ISO 27001 certification is aimed at creating and establishing processes to safeguarding information your Information Security from unauthorised access, use, destruction, modification or disclosure. Information Security is an essential component to the successful operation of any organisation regardless of your size or industry.
Your business will deal with sensitive information of some sort be it employee or client details, financial information or even patents and other items of intellectual property. Here are four easy to implement tips to establish your Information Security procedures and protect your sensitive information from falling into the wrong hands.
Tip one: Know how to spot a fake email
This one may seem a little email 101 to most of us but it’s one that can be easy to disregard.
Fake emails often contain malicious attachments and web links that can contain spam or phishing content. Ensuring that all your staff are aware of the traits of a fake email and how to spot them is an essential first step to ensuring that your organisation isn’t caught out. Some things to keep an eye out for are;
- Calls for action – terms like ACT NOW or IMMEDIATE ACTION required are often seeking to confuse the reader
- Incorrect spelling or Grammar
- Be wary of giving out personal information
Tip Two: Keep your passwords close
Many people tend to use the same or similar passwords for multiple accounts, therefore if your password is compromised once there is a good chance other sensitive accounts could be compromised as well. Make sure your password isn’t one of these 25 most popular passwords. Maintaining good password hygiene and ensuring you aren’t sharing your passwords with others is a good place to start.
READ So why do we need to be concerned about digital security?
Tip Three: Keep your software up to date
Out of date software also makes your IT systems susceptible to malware attacks which can be a crippling occurrence to any business big or small. Software Updates often contain security patches to fend against evolving viruses and address issues and gaps within the software that such viruses can take advantage of.
Tip Four: Pay close attention when both sending and receiving invoices.
The New Zealand construction industry was recently the victim of an invoice fraud incident. Hackers were able to gain access to the email invoices from a NZ construction company and were able to reissue the invoices with fraudulent bank details. This resulted in customers paying over $100,000 into a false account. Read the full story here.
Be aware of changes to invoicing details and always seek to confirm these changes either in person if possible or over the phone with an established contact within the organisation. Care also needs to be taken when sending invoices – make sure your invoice details are correct and that invoices are being sent to the correct persons.
Want to speak to someone?
Contact Us
Contact us and speak to one of our helpful team about your ISO certification needs. We can offer certification to smaller, niche standards and to other non-accredited (non ISO) standards as well.
Request a Quote
Request an obligation free quote today, tailored specifically to your business’ certification needs and industry.
