Initial Assessment (Gap Analysis)
Establishing your current state against ISO/IEC 27001 and legal obligations. Infrastructure review, identification of obligations under the Law on Information Security, and a report with recommendations.
Risk Assessment Document and Basic Compliance
Information asset inventory, risk assessment, preparation of the Risk Assessment Document in the legally required form, and core policies (access control, incident management, backup).
Full ISMS Implementation (ISO/IEC 27001)
Complete implementation of an information security management system, through to readiness for the certification audit.
Maintenance and Support
Annual review of the Risk Assessment Document, internal audit, and support with reporting incidents to CERT.