ISMS and ISO/IEC 27001

Information Security is a critical business requirement of global organizations. ISO/IEC 27001 is one of the most sought-after certification schemes for global organizations as part of their risk management and assurance framework.

An established Information Security Management System (ISMS) in alignment with ISO/IEC 27001 need to be managed, governed and continually improved on an ongoing basis.

Wings2i partners with our clients as the knowledge and professional services partner to provide the end-to-end enablement, support and facilitation towards maintaining and continually improving the ISMS and ensuring continued certification status. We provide the necessary services including:

• Subject matter expertise and guidance
• Planning and governance of all ISMS related activities
• End-to-end guidance, advisory services and facilitation
• Professional Services towards:
• Review and update to Organization and information context.
• Tracking of objectives and their achievements
• Periodic Risk assessment and treatment,
• Review and update documentation,
• Ongoing assistance to Control and practices maintenance and improvement,
• Ongoing training and awareness
• Periodic Internal audits
• Closure of audit findings
• Periodic Management reviews
• Preparation of surveillance/recertification audits
• Facilitation and support surveillance/recertification audits.
• Guidance and assistance during security incidents
• Continual improvement