ISO 27000

The ISO 27001 standard published in October 2005 is a specification for ISMS, an Information Security Management System.

The objective of the standard itself is to "provide a model for establishing, implementing, operating, monitoring, reviewing, maintaining, and improving an Information Security Management System". The design and implementation of an organization's ISMS is influenced by their needs and objectives, security requirements, the process employed and the size and structure of the organization".

The standard defines its 'process approach' as "The application of a system of processes within an organization, together with the identification and interactions of these processes, and their management". It employs the PDCA, Plan-Do-Check-Act model to structure the processes

Who is it applicable to?

This standard can be used by any organization, institution or a company which uses internal or external computer systems/ possesses, depends on information technology to carry out its business activities, or simply wishes to adopt information security. ISO 27001 is suitable for all those organization where the protection of information is critical, such as in the IT sector, BPO, finance, health, irrespective to size, location of the organization. It can be used to assure customers that their information is being protected Organizations of all types, sectors and sizes can improve their performance through the implementation of this standard.

Benefits of ISO 27001:2005:

• Systematic identification of Information Security Risks and its mitigation.
• Availability of Business Continuity Plans in case of manmade and natural disasters.
• Potentially lower premium of computer risk insurance.
• Better protection of confidential data and reduced risks from hackers’ attacks.
• Faster and easier recovery from the attacks and improved ability to survive disasters.
• Compliance with legal and contractual requirements.
• A structured and globally recognized Information Security Methodology.

How can AEC help you to achieve ISO 2700: 2005 Certification?

AEC will assist your organization in ISO awareness training, documentation, implementation, internal auditing and overall process optimization as per ISO 2700: 2005 standard. AEC is a result oriented professional training and certification service providers, offering systematic approaches to improve quality and effectiveness of the system and enhance the productivity by offering systematic approaches. Our main objective is to help you and your organization improve profitability, through better utilization of all of your resources.