Strategic management of IT security
Design & Implementation
of an ISMS
An ISMS safeguards a company’s information assets and creates sustainable structures for greater resilience through processes, measures and continuous improvement. As your partner, we support you in the systematic development and successful implementation of an ISMS in accordance with ISO/IEC 27001. A key to success is internal communication. As the entire organisation must be involved, engaging and gaining the buy-in of all staff is absolutely crucial for establishing a holistic security framework.
In my experience, effective security always starts with leadership. Responsibilities, decision-making processes and escalation criteria must be clearly and bindingly defined, as it is only on this basis that operational measures can be effective. The ability to act arises from a clearly defined timeframe with specific objectives.
Erik Krüger
Information Security Officer | Governance, Risk & Compliance Consultant
Foundations of information security
controlled safety-
establish management
An ISMS (Information Security Management System) is the foundation for managing information security within your organisation in a sustainable and traceable manner. Alignment with recognised standards such as ISO/IEC 27001 ensures transparency, risk minimisation and legal certainty in both management and day-to-day operations.
management summary
transparency and
continuous improvement
With a structured ISMS in accordance with ISO/IEC 27001, you’ll benefit from robust processes, clear lines of responsibility and centralised documentation for all security-related matters.
The result: Greater transparency, minimised risks and a demonstrably improved security culture, both now and in the future.
The implementation of an ISMS takes
Implementation of an ISMS
is a lengthy process
1
Project preparation
- Analysis of security levels, objectives and organisation
- Joint definition of the project scope
2
Document review
- Review and updating of existing ISMS documents
- Creating a central list of measures
3
Structure of the document master data
- Preparation of all necessary ISMS documents
- Selection of appropriate policies and processes
4
Gap analysis
- Alignment with the reality of business
- Identification of further possible measures
5
Action Management
- Centralised management of all tasks
- Continuous tracking and progress monitoring
6
Quality Assurance & Finalisation
- Implementation of all findings within the organisation
- Final presentation and handover