ISO/IEC 27001
Information Security Management System Certification
Information security breaches can have a major impact on your company’s business continuity and revenues. To help protect your organization, WECERT offers certification to ISO/IEC 27001, an Information Security Management System that ensures the confidentiality, integrity and security of company information.
Improve compliance with data protection requirements and reduce risks related to personally identifiable information
In an increasingly connected world, information security breaches are a growing threat. Consumers, investors and stakeholders have high expectations for information security, and regulations are becoming more stringent for organizations of all sizes.
To safeguard their data, many businesses are implementing Information Security Management Systems. The ISO/IEC 27000 family of guidance and management standards helps secure the confidentiality of your company’s information. With internationally recognized certification from WECERT, companies can demonstrate the availability, integrity and confidentiality of their information and reduce the risk of information security breaches.
Benefits of becoming certified
The standard takes a comprehensive approach to information security and protecting assets.
ISO/IEC 27001 will help you protect your information in terms of the following principles:
- Confidentiality ensures that information is accessible only to those authorized to have access;
- Integrity safeguards the accuracy and completeness of information and processing methods;
- Availability ensures that authorized users have access to information and associated assets when required;
- Technical protection against computer fraud.
Improved Risk Management
Ensure customer records, financial information and intellectual property are protected from loss, theft and damage through a systematic framework.
Global recognition as a reputable supplier
Certification is recognized internationally and accepted throughout industry supply chains, setting industry benchmarks for sourcing suppliers.
Business continuity
Avoid downtime with management of risk, legal compliance and vigilance of future security issues and concerns.
Win more business
Procurement specifications often require certification as a condition to supply, so certification and verification opens doors.
ISO/IEC 27001: INFORMATION SECURITY MANAGEMENT SYSTEM
ISO/IEC 27001 heads a family of information security standards that provide comprehensive guidance and support to systematically understand your information security risks and vulnerabilities. By implementing ISO/IEC 27001, you can apply rigorous information security methodologies, reducing risks and safeguarding against security breaches.
ISO/IEC 27017: INFORMATION SECURITY FOR CLOUD SERVICES
ISO/IEC 27017 is an international code of practice for cloud-based information that establishes clear controls for information security risks. For cloud-service providers already certified to ISO/IEC 27001, ISO/IEC 27017 is a complementary standard that helps reassure clients of their information safety.
ISO/IEC 27018: PERSONALLY IDENTIFIABLE INFORMATION
Cloud services providers that process significant volumes of Personally Identifiable Information (PII) can be certified to ISO/IEC 27018, individually or in conjunction with ISO/IEC 27001 and/or ISO/IEC 27017. This international code of practice establishes controls for information backup management, information recovery and erasure, procedures for customer disclosure and more.
What is ISO/IEC 27001 ?
ISO 27001:2013 and ISO/IEC 27001:2022 are the international standards that provides a framework for Information Security Management Systems (ISMS) to provide continued confidentiality, integrity and availability of information as well as legal compliance. ISO/IEC 27001 certification is essential for protecting your most vital assets like employee and client information, brand image and other private information. The ISO standard includes a process-based approach to initiating, implementing, operating and maintaining your ISMS.
1
Step 1
Complete a Quote Request Form so that we can understand your company and requirements. You can do this by completing either the online quick quote or the online formal quote request form. We will use this information to accurately define your scope of assessment and provide you with a proposal for certification.
2
Step 2
Once you’ve agreed your proposal, we will contact you to book your assessment with an WECERT Assessor. This assessment consists of two mandatory visits that form the Initial Certification Audit. Please note that you must be able to demonstrate that your management system has been fully operational for a minimum of three months and has been subject to a management review and full cycle of internal audits.
3
Step 3
Following a successful two stage audit, a certification decision is made and if positive, then certification to the required standard is issued by WECERT. You will receive both a hard and soft copy of the certificate. Certification is valid for three years and is maintained through a programme of annual surveillance audits and a three yearly recertification audit.
