Black Penny Consulting logoBlack Penny

Information security management

ISO/IEC 27001

ISO/IEC 27001 is the international standard for an information security management system (ISMS): a risk-based way of protecting the confidentiality, integrity and availability of information.

01Why it matters

Increasingly it is a condition of winning contracts. Certification gives customers, insurers and investors independent proof that you secure their data appropriately.

02How we help

  • Scoping and Statement of Applicability
  • Risk assessment and treatment plan
  • Policies and Annex A controls sized to your organisation
  • Internal audit and certification readiness

Something keeping you awake at night?

Tell us what's worrying you. We'll give you an honest view of where you stand and what to do next, no jargon, no obligation.

Arrange a consultation