Introduction
Having developed Information Risk Management (IRM) policy, deployed the necessary people, processes and equipment to ensure mitigation of risks, it is advisable for companies to ensure continued effectiveness of these measures through periodic audit (the “policing” of “policy, procedures & policing”). Audit is also needed in order to comply with ISO27001/BS7799 or BS25999 should certification to these standards be sought.
Domains
Data Dialogues is able to offer 1st Party and 2nd Party audit to ISO27001/ BS7799, as well as remediation advice, by way of preparation for formal, 3rd Party audit to these standards or simply for in-house due diligence purposes.
