ISO/IEC 27001:2022 specifies the requirements for an information security management system (ISMS). It uses risk assessment to select controls that protect the confidentiality, integrity and availability of information.
Who it is for
- IT, software and BPO companies
- Organisations handling customer or payment data
- Vendors asked for security certification by enterprise clients
Benefits
- Win enterprise and international clients that require it
- Risk-based control of data breaches and outages
- Supports compliance with data protection laws such as India's DPDP Act
- Clear security roles, policies and incident response
How we help
Our consultants run a gap assessment, help you build the documentation and processes, train your team, conduct an internal audit, and support you through the certification audit with an accredited certification body.
Frequently asked questions
Which version should we certify to?
New certifications are to ISO/IEC 27001:2022. Certificates to the older 2013 version have been transitioned out.