ISO 27001 Programs
Guided Training Programs
5 Training Sessions covering all mandatory ISO27001:2022 requirements. Presentation style meetings, explaining all templates and sections of Compleye Online Platform.
Proving examples, sharing knowledge and experience.
All actions will need to be completed by the customer.
Questions can be asked during the training.
We share our Professional Implementation Program Template.
Professional Implementation Program
1-3 months program, with 10 sessions covering all mandatory ISO27001:2022 requirements.
Interview style meetings, learning on the job experience with assignments after each session for team members involved.
Compleye takes the role of Privacy and Compliance Officer and will be responsible of part of the implementation.
Implementation according requirements of Chapter 4-10 – ISMS Manual.
Including: X-ray, GDPR Implementation, Supplier Management, Legal, HR, Mandatory assessment and Awareness Training preparation. All templates are included.
Security
A good foundation is needed for your ISMS.
We start with visualising your IT infrastructure and design an X-ray of your Value Proposition. It is your first risk assessment and tells you what is and what is not in scope for your ISMS.
After this kickoff you will define your security policies and together we will define what measures are needed.
We review your assets – People included – you will adopt the best supplier management procedure you can get.
After this day you will now what improvements are still needed to work on and have your checklists and activities planned.
Legal
The boring stuff – ‘we can not make it fun, but we can make is easier’.
With our Privacy Framework Document, you will understand what legal documentation you need and tick all the privacy boxes.
During the GDPR Assessment you will discover how many privacy policies you need and understand your role as controller and processor.
You will assess all stakeholders with their legal requirements and focus on the HR related topics. Because the majority of the data breaches are still human failure.
Assessments
A deep dive into the X-ray and security measures.
- Information security risk assessment including your Statement of Applicability
- Disaster Recovery Plans
- Security in Operational Procedures
- Office Security
- Supplier Assessments
We are sure after this day you will have a nice homework list.
ISMS Operations
Time to put your ISMS in the heart of your organisation.
- Perform your Business Continuity Plan
- Define your Objective and set your security metrics.
- Implement a threat intelligence policy.
- Assign owners to activities and improvements
- Internal Audit performed by Compleye
And organise a security awareness training for your entire team.
ISMS Management
Step in the continual improvement loop of your ISMS.
- Management Review Report
- Change Management via X-ray interactions
- Mandatory Topics check
- Security Meetings
- Internal Audit process
- External Audit process
Well if you have finalised the roadmap you can truly say that you have implemented an ISO27001 proofed ISMS – as the picture below shows.
