
ISO/IEC 27001:2013 is the
requirements specification standard for an
information security management system, or
ISMS for short. There are requirements for
performing information security risk
assessments, risk treatments, and for
producing a 'Statement of Applicability'.
Reputedly, some organisations have found
difficulty with these requirements because
they state what must be done, not how to do
it.
There are standards in the ISO/IEC 27xxx
series that offer guidance on how to fulfil
the requirements of ISO/IEC 27001. These are
descriptive in nature. They describe how
organisations could perform risk assessments
and offer advice on how to construct a
Statement of Applicability (SOA). However,
they are lacking in worked examples.Having
assisted many organisations to achieve
ISO/IEC 27001 certification, I have
developed and fine-tuned a methodology for
fulfilling these requirements.
The IT Toolkit has truly revolutionized our IT operations. It's the foundation of our SOPs, helps generate run books, reduces training costs, and boosts user satisfaction.
After implementing the IT Toolkit, we now have a well-organized IT plan that's professional and easy for everyone to access and use.
Our clients have responded positively. Even those who had information, found ours better organized, making us more efficient and improving our IT management.
The toolkit offers a framework for best practices, ensuring that as practices evolve, our documentation system adapts seamlessly.
The IT Toolkit brings structure to documentation management, reducing the workload on engineers so they can focus more on clients. It's a game changer.
The IT Toolkit prevents duplicate entries and has replaced two other tools, making it much more effective and faster. Our engineers love it!
The IT Toolkit is incredibly easy to use with no ramp-up time. It's a straightforward process that gives clients control while simplifying their workflow.
The IT Toolkit has given me a better understanding of IT management efficiency and provides an easy, friendly way to improve our processes.
The toolkit has helped me organize my thoughts and training strategies with our IT team, making everything more streamlined.
Excellent IT Toolkit! It's essential for all CIOs and technology managers looking to enhance their operations.
A very useful toolkit, one of the best I've used. I wish every IT manager could benefit from it.
These toolkits have boosted my confidence and empowered me to grow as an IT Manager.