Information Security & IT Service Management
“Customers ask us to prove our information is secure.”
ISO/IEC 27001 and ISO/IEC 20000-1 readiness, with practical security and service processes.
We build information security and IT service management systems around your real risks — asset and risk assessment, controls, policies, incident and change management — and prepare you for certification.
What this service covers
Signs you need this
- Customer and regulator security questionnaires
- Unclear IT service processes
- Incidents handled ad hoc
What you receive
- Risk assessment and treatment plan
- Statement of applicability
- Policy set
- Readiness review
Outcomes to expect
- Proven security posture
- Reliable IT services
- Certification readiness
Our approach
- Scope, assets and risk assessment
- Controls and statement of applicability
- Policies and processes
- Internal audit and readiness
Frequently asked questions
Do you perform penetration tests?
No. We build the management system; technical testing is done by specialist firms you appoint.
How long does ISO 27001 readiness take?
Typically four to nine months depending on scope and current maturity.
Related consulting
Digital Transformation & ERP Readiness
Process requirements, business analysis and readiness before you buy and implement systems.
Read more “Our people spend hours on repetitive, manual work.”Process Automation & RPA
Find, design and govern automation — RPA, workflow and low-code — on processes that are ready.
Read more “We have data but can't use it to decide.”Data Analytics & Business Intelligence New
Data foundations, dashboards and analytics that answer real business questions.
Read moreTell us what you want to improve.
Share your goal and we will reply with a practical approach — a consulting proposal, an in-company program or the dates of our next public course.