IT Governance & Cybersecurity

Information security and resilience programmes built around recognised standards and your actual threat profile.

What we deliver

Indicative durations. We confirm the plan and timeline in your proposal.

1
Scoping & risk assessment
ISMS scope, asset inventory and an information security risk assessment.
DeliverableScope statement and risk assessment report2 to 4 weeks
2
Gap analysis
Current controls compared with ISO/IEC 27001 Annex A and, where relevant, COBIT governance objectives.
DeliverableGap report and risk treatment plan2 to 3 weeks
3
ISMS & continuity design
Policies, Statement of Applicability, business impact analysis and continuity plans.
DeliverableISMS documentation and continuity plans4 to 8 weeks
4
Implementation & awareness
Controls put in place, staff awareness training and a continuity exercise.
DeliverableImplemented controls and exercise report2 to 4 months
5
Internal audit & certification
Internal audit, management review and support through the certification audits.
DeliverableCertification-ready ISMS4 to 6 weeks

Tell us where you are today. We'll reply with a proposed approach, timeline and the team who would lead it.