ISO 27001
Réduisez les risques et optimisez les opérations au sein de votre organisation avec une certification ISO/IEC 27001:2022 , communément appelée ISO 27001.
Avez-vous confiance en la capacité de votre organisation à protéger suffisamment vos données ? Avec la norme ISO 27001, vous pouvez développer un système de gestion de la sécurité de l’information (SMSI) conçu pour gérer la sécurité des données telles que les informations financières, les secrets commerciaux et autres documents confidentiels.
Minimize risk with an ISO 27001 certification
ISO 27001 is a longstanding cybersecurity framework used to build an ISMS within your organization. This certification was established by the International Organization for Standards (ISO), an international standard-setting body that facilitates common standards across nations.
As a risk-driven standard, ISO 27001 focuses on the confidentiality, integrity and availability of the data in your environment. A-LIGN will ensure your audit process is performed in accordance with ISO audit requirements.
The benefits of ISO 27001 certification:
- Defines responsibilities and business processes for information security
- Builds a culture of information security and diligence
- Reduces security incidents through implemented controls specific to your unique risks and assets
- Meets additional security compliance requirements
ISO 27001 services
- Pre-assessment
- Stage 1 audit
- Stage 2 audit
- Surveillance audit
- ISO 27701
- ISO 27017 & ISO 27018
Pre-assessment
Are you undergoing ISO 27001 certification for the first time? If so, our pre-assessment is for you. We simulate the certification audit and perform a review of your company’s scope, policies, procedures and processes to review any gaps that may need remediation.
Stage 1 audit
We review your company’s documentation to confirm it follows the ISO 27001 standard and check to see that required activities are complete prior to the second stage of your audit.
Stage 2 audit
Is your system conformed to the ISO 27001 standard? Let us test and confirm. This part of the audit includes interviews, inspection of documented evidence, and process observation.
Surveillance audit
Following your certification, we conduct annual surveillance audits to ensure your ongoing conformity with the ISO 27001 standard and give you the peace of mind that your systems and processes are compliant.
ISO 27701
Adding ISO 27701 is increasingly important as privacy concerns and requirements grow. As an extension to ISO 27001, this assessment provides the requirements and guidance for establishing, implementing, maintaining and continually improving your organization’s privacy information management system (PIMS).
ISO 27017 & ISO 27018
Including the ISO 27017 controls in your ISMS shows the maturity of your cloud organization’s information security environment. ISO 27018 is designed to demonstrate your cloud environment’s ability to handle personally identifiable information (PII).