ISO 27001 Information Security Management Standard

ISO 27001 Information Security Management – implement ISO 27001 with proof of compliance, train employees and protect your information assets.

The ISO 27001 standard was published in October 2005, essentially replacing the old BS7799-2 standard. It is the specification for an ISMS, an Information Security Management System. The standard provides a model for establishing, implementing, operating, monitoring, reviewing, maintaining, and improving an Information Security Management System.

Manage ISO 27001 Policies and Procedures

ISO 27001 helps to protect your information assets and give confidence to any interested parties, especially your customers. The standard adopts a process approach for establishing, implementing, operating, monitoring, reviewing, maintaining, and improving your ISMS. jComply can automate the entire process through its 8 simple steps:

• Create Document
• Review Document
• Approve Document
• Publish Document
• User Training
• User Test
• User test Evaluation
• Compliance Report

ISO 27001 is suitable for any organization, large or small, in any sector or part of the world. The standard is particularly suitable where the protection of information is critical, such as in the finance, health, public and IT sectors. jComply SaaS gives users an option to access jComply from anywhere in the world thus giving managers a tool to ensure that their employees are always provided with the latest polices and training material.

ISO 27001 Training

Given the sensitive nature of information security it is imperative that employees have training regularly to ensure that the policies and procedures stay fresh in their mind. Through the jComply eLearning module managers can set up multiple training and test sessions for future dates as well. The employees can access the policies during training and can take training in their own time and convenience. Once they have passed the training stage managers can test them to check the company’s compliance level.

Risk Assessment

jComply risk assessment module is a fully integrated module that allows organisations to identify, analyse, monitor and mitigate risks that may affect an organisation’s business goals and objectives.

The Question Library within jComply allows risk managers to declare weightage and scoring against questions. The system launches the risk assessments using built-in workflow, issues email notifications, maintains full audit trail, generate management reports and log action tasks against the identified risks. Each action task is allocated to an individual with a due date and is tracked to completion with email alerts and escalations. The system generates a risk graph that plots the identified risks against the organisation’s risk threshold levels.

For more information on Risk Assessment visit www.jcomply.com/modules/risk-assessment