ISO 27001 - Information Security Management System
Contact with us
Menu
ENPLUA
Home/Certification of management systems and products/Information security/ISO/IEC 27001

ISO 27001 - Information Security Management System

ISO/IEC 27001 is an internationally recognized standard for Information Security Management System. The standard applies to all organizations to which information is a measurable value or its protection is a legal requirement. The spectrum of these organizations is therefore very broad: companies, banks, public administration on different levels, public healthcare organizations, non-profit organizations.

 

Information security as defined in ISO 27001 is not limited to information stored in electronic form on your computer, but for all information processed in any form, for example: printed or written on paper, stored electronically on any medium, processed in different systems and processing environments, sent via traditional mail and e-mail, recorded in images, videos, sound or passed during a call.

 

Regardless of the form of information processing and the methods and tools used, the ISO / IEC 27001 standard helps organizations to create appropriate conditions for the protection of information. That should be adequate to the corresponding risk of loss, damage or declassifying information.

 

According to the Standard, information security should always be considered via three aspects:

  • confidentiality of information - understood as ensuring that only authorized persons or entities have access to the information,
  • integrity of information - understood as ensuring that the information is complete (does not include exclusions that may affect the proper understanding of media information),
  • the availability of information - understood as ensuring that authorized users have access to information at all times when it is necessary to carry out their tasks.

ISO 27001 certification

When all requirements of the ISO/IEC 27001 standard are met, and it can be so proven by internal audits, the organization may proceed to an external audit. This external audit should be carried out by a third party – accredited certification body.

 

Certification will be carried out in 2 Stages. Stage 1 covers document review and Stage 2 checks the functioning of management system within the company.

 

During the ISO/IEC 27001 certification the auditor will focus on reviewing:

  • the information security policy,
  • statement of applicability,
  • risk analysis methodology,
  • documented security procedures,
  • if the work methods and practices that are employed are in accordance with procedures and the established security goals,
  • that appropriate records are kept.

 

After positively completing the certification  the Auditor shall recommend that  a certificate for ISO 27001 is issued and  registered.

 

The next steps are surveillance audits which are aimed to assure that the management system continuous to be effective, is being improved and still in compliance with ISO/IEC 27001 standard.

What is the cost of ISO/IEC 27001 certification?

ISOQAR has an individual pricing approach for each Client. We take into consideration many factors before we make a proposal.

 


To get a proposal please complete the on-line form or call our office.

Contact us

„According to Article 13, paragraphs 1 and 2 of the General Data Protection Regulation of April 27, 2016 (hereinafter GDPR), we inform you that the administrator of your personal data is ISOQAR CEE sp. z o.o., headquartered in Warsaw, address: ul. Wąwozowa 11, 02-796 Warsaw. Your personal data will be processed for contact purposes necessary for the provision of the service, in accordance with applicable legal regulations based on Article 6(1)(f) of the GDPR.”

„I consent to the processing of my personal data by ISOQAR CEE sp. z o.o as the personal data administrator, for the purpose of receiving commercial and marketing information sent to the provided email address based on Article 6(1)(a) of the GDPR. More information in the Polityka prywatności

Site map
ISOQAR CEE sp. z o.o z siedzibą w Warszawie, adres: ul. Wąwozowa 11, 02-796 Warszawa, NIP 9512091016, wpisana do Krajowego Rejestru Sądowego prowadzonego przez Sąd Rejonowy w dla m.st. Warszawy, XIII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem KRS: 0000178492, wysokość kapitału zakładowego: 50.000,00 zł

Projekt i realizacja:

Media Solutions Group&Web Development

Regulamin plików cookies

Klauzula informacyjna newsletter

Cookie Policy

Klauzula informacyjna zapytanie ofertowe

Information clause regarding the request for quotation

In accordance with Article 13(1) and (2) of the General Data Protection Regulation of April 27, 2016 (hereinafter GDPR), I hereby inform you that:

1. The administrator of your personal data is ISOQAR CEE sp. z o.o., with its registered office in Warsaw, at ul. Wąwozowa 11, 02-796 Warsaw, NIP 9512091016, entered into the National Court Register kept by the District Court for the Capital City of Warsaw, XIII Commercial Division of the National Court Register under KRS number: 0000178492.

2. The Administrator has appointed a Data Protection Officer, Mr. Krzysztof Radtke, who can be contacted by e-mail at: iod@isoqar.pl.

3. Your personal data will be processed for the following purposes:

• To respond to a request for quotation, pursuant to Article 6(1)(f) GDPR. More information available at the link.

• To contact you for the purpose of providing marketing and commercial information, pursuant to Article 6(1)(a) GDPR.

• To pursue the Company’s legitimate interests, consisting of establishing or pursuing claims or defending against claims, pursuant to the Company’s legitimate interest (Article 6(1)(f) GDPR).

4. The recipients of your personal data will be the partners and employees of the Administrator, within the scope of their official duties and based on authorization.

5. Your personal data will not be transferred to any third country or international organization.

6. Your personal data will be stored until the end of cooperation or until you withdraw your consent.

7. You have the right to access your personal data and the right to rectify, erase, restrict processing, the right to data portability, the right to object, and the right to data portability.

8. You have the right to lodge a complaint with the supervisory authority—the Personal Data Protection Office—if you believe that the processing of your personal data violates the provisions of the GDPR.

9. Providing your personal data is voluntary, however it is necessary in order to execute the subject of the agreement / it is necessary due to specific legal provisions (the processing of personal data is a statutory requirement). If you do not consent to the processing of your personal data, the Administrator may refrain from concluding the contract.

10. Your data will not be processed in an automated manner, including profiling. This means no decisions that produce legal effects concerning you, or significantly affect you in a similar way, will be based solely on automated processing of personal data, nor will such automated decisions be made.