ISO 27001 implementation and certification, guided by experts
Expert-led ISMS implementation from gap analysis to successful certification audit.
Areas of application for ISO 27001
Define your scope
You decide in which areas of your company you want to implement the standard, whether company-wide or limited to specific processes, departments, or teams.
Identify relevant threats
Analyze which specific threats exist, which areas are affected, and which requirements need to be taken into account, from external factors like cyber attacks to internal topics like home office security.
Document your scope
ISO 27001 requires a scope document covering context of the organization, interested parties, interfaces, dependencies, location descriptions, and organizational units.
Recognize and protect sensitive data
Defining the scope helps you understand the necessary security requirements and focus on the really key issues. ISO 27001 supports you not only in protecting your sensitive data, but also in recognizing it.