ISO27000 defines a set of standards that have been prepared to provide a model for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an Information Security Management System (ISMS).
Before embarking on an ISO27001 certification process or as part of information security best practices it is good to establish an information security baseline from which you can measure your security management and IT environment.
EKKO consultants are experts in ISO27002. We utilize this standard to provide you an information security gap analysis report. The report contains a domain by domain analysis of your security management system within the scope we agree before the assessment.
Upon initiation of the assessment we gather information to understand your objectives for the project to ensure that our report deliverables address your security, regulatory or governance concerns.
The deliverables include an executive level scorecard report and detailed findings and recommendations for security improvements within your organization. Findings are categorized and prioritized to facilitate the remediation activity process.