Category: Information Security
Analytix information security consulting services will assist you to establish or improve your information security programme with experienced and certified consultants.
Alignment with ISO 27001
These services are aimed to assist organisations to effectively develop and implement the requirements of the ISO/IEC 27001 international information security standard.
Information Security Management System
Our consultants provide the technical expertise and experience to assist you to establish and document an Information Security Management System (ISMS) which is implemented, maintained and continuously improved for effectiveness.
The scope and structure of an information security programme can vary, and our effort expended will be tailored to the needs of your organisation, while we will ensure that the essential elements of an ISMS lifecycle is established to :
- Plan – Establish information security management strategy, policy, objectives, targets, processes and procedures to manage risk and improve cyber security in accordance with business needs, strategy, polices and objectives
- Do – Identify and classify information assets, conduct risk assessment, and implement and operate controls to manage cyber security risks in a manner consistent with overall business risks
- Check – Monitor and review the performance and effectiveness of the ISMS, using objective measurement
- Act – Review outcomes and performance indicators or benchmarking findings, and act accordingly to continually improve the ISMS
Analytix’s approach to Information Security Programme implementation is based on assisting organisations to adopt and embed a information security amagement lifecycle that comprises of the required elements for establishinbg an Information Security Management System (ISMS), in alignment with the best practice guidelines of international informations security standard, ISO/IEC 27001.
This approach and methodology can be implemented by organisations of all sizes, in all sectors: public, private, non-profit, educational, manufacturing, etc.
Our ISMS implementation service could involve consulting assistance with one or more of the following aspects:
- Providing a conceptual framework, structures, processes, resources and information that defines the essential Information Security Management activities and responsibilities
- Describing the Information Security Management system that has to be adopted and followed
- Obtaining IT-wide consistency regarding the structure and application of the Information Security Management process and procedures
- Establish mechanisms to report and provide assurance to the executive and business management about the delivery of value and management of Information Security related risks consistently across the organisation
- Embedding a common Information Security Management language across the organization in alignment with the corporate GRC systems
- Operationalising Information Security Management to become part of the organisation’s operations
- Establishing accountability and responsibility for Information Security Management
Analytix’s approach to ISMS implementation support is based on the ISO/IEC 27001 Information Security Standard. The ISO/IEC 27001 Standard effectively comes in the following parts:
- ISO/IEC 27001:2013 – is a standard specification for Information Security Management Systems (ISMS). An ISMS is the means by which Senior Management monitor and control their security, minimising the residual business risk and ensuring that security continues to fulfil corporate, customer and legal requirements.
- ISO/IEC 27002:2013 – is the standard code of practice and can be regarded as a comprehensive catalogue of good security actions.ISO/IEC 27003:2010 – Information technology — Security techniques — Information security management system implementation guidance
- ISO/IEC 27003:2010 – provides practical implementation guidance and provides further information for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an ISMS in accordance with ISO/IEC 27001. . Provides a process oriented approach to the successful implementation of the ISMS in accordance with ISO/IEC 27001.
- ISO/IEC 27004:2009 – provides guidance and advice on the development and use of measurements in order to assess the effectiveness of ISMS, control objectives, and controls used to implement and manage information security, as specified in ISO/IEC 27001. Provides a measurement framework allowing an assessment of ISMS effectiveness to be measured in accordance with ISO/IEC 27001
- ISO/IEC 27001:2005 – provides guidance on implementing a process oriented risk management approach to assist in satisfactorily implementing and fulfilling the information security risk management requirements of ISO/IEC 27001.
Depending on the Terms of Reference and Scope of Work, typical deliverables of an ISO/IEC 27001 Information Security Management programme implementation project may include:
- ISO 27001 Assessment and assessment report
- ISMS scope
- Information security policy
- Information Security polcies for the following ISO 27002 domains:
- Organization of Information Security
- Human Resource Security
- Asset Management
- Access Control
- Cryptography
- Physical and environmental security
- Operation Security- procedures and responsibilities, Protection from malware, Backup, Logging and monitoring, Control of operational software, Technical vulnerability management and Information systems audit coordination
- Communication security – Network security management and Information transfer
- System acquisition, development and maintenance – Security requirements of information systems, Security in development and support processes and Test data
- Supplier relationships – Information security in supplier relationships and Supplier service delivery management
- Information security incident management – Management of information security incidents and improvements
- Information security aspects of business continuity management – Information security continuity and Redundancies
- Compliance – Compliance with legal and contractual requirements and Information security reviews
- Information security risk assessment process and methodology
- Information security risk treatment process
- Information security objectives
- Information security roles and responsibilities
- Other ISMS-related documents deemed necessary by the organization
- Operational planning and control documents
- Risk assessment and reporting templates
- The decisions regarding risk treatment
- Monitoring and measurement framework for information security
By implementing ISO/IEC 27001 an organisation will be working to a globally recognised standard that is considered an exemplar of information security best practice in 150 countries. ISO 27001 offers an excellent framework for developing or enhancing your organisation’s security and effective security management practice to provide greater confidence in dealings with other organisations.
A full implementation and / or certification provides many tangible benefits:
- Is often a deciding differentiator between competing organisations
- Enhances your clients’ and business partners’ confidence and perception of your organisation
- Focuses your organisation on financial gains through cost savings and business growth
- Strengthens management controls on information critical to business processes
- Provides confidence that you have professionally managed risk in your own security procedures
- Enhances security awareness within your organisation
- Assists in the development of best practice
- Prevents commercial loss through theft, denial of service or espionage
- Enables your organisation to conduct sensitive transactions securely
- Strengthens your organisation’s business continuity planning
Navigate Consulting
Frequently Asked Questions
Use our FAQ to quickly find the answers to the most common questions asked by customers.
Why choose us?
We have over 22 years of experience in helping businesses and employees reach their potential with advanced skills and certifications, no matter what their industry or background experience.
All our services are bespoke, which means we offer the freedom and flexibility to create a solution specific to your industry & training needs.
We can use one or more of our services to deliver the outcome required to gain the maximum results for your business.
Specialist Consultancy Services
We offer a free introductory consultation service, to get an understanding of your organisation, your working environment & your training needs.
Our expertise & experience, combined with your working knowledge, delivers results that are practical & specific to your needs.
Training That Works
We have been involved in many differing, diverse & interesting projects & we have built relationships with organisations from varying industries & sizes. Our efficient, cost-effective and engaging training courses are designed for your company and team to improve the overall business performance and equip employees with up-to-date skills and knowledge.
Talk to us today, and let us help you develop your team with our bespoke training and consultancy services.
Do you only deliver training in Johannesburg?
No, we deliver training in all 9 provinces within South Africa. We have also delivery training in several countries such as Belgium, The Kingdom of Saudi Arabia, Togo, Zambia, Rwanda, Tanzania and Swaziland.
What are the minimum and the maximum number of candidates we can train in-house?
The minimum number of candidates required for in-house training is 6. With regard to the maximum number, this depends a little on the size of the training room you have available, but we normally say between 15 – 25.
Can you tailor the course to our specific requirements?
Yes, all of our courses can be tailored to your requirements. We will aim to refer to working examples within your business or industry.
Who are your clients?
Our clients come from companies and organisations of all sizes within the public and private sector. We work in most industries and have a proven track record of delivering high levels of customer satisfaction. See some of the names we have worked with here.
Instant Purchase in 4 easy steps!
- Pay with card
- Receive an instant download link
- Click on the download link
- Files download straight to your PC
