ControlCase is a global provider of IT Certification and Continuous Compliance services.
ControlCase is accredited to multiple IT standards as a certification assessor and auditor.
Cut Time and Costs for ISO 27001 Certification by More Than 30%
Simplify and Automate the ISO 27001 Certification Process.
BEGIN YOUR ISO 27001 JOURNEY NOW!
Our offerings enable clients to effectively manage their IT Governance, Risk Management and Compliance Management efforts
1
Our technology empowers on-time, seamless and continuous compliance
2
Partnership approach
3
Receive PCI, ISO 27001, SOC 2 or HIPAA as part of your certification process
Contact us today!
USA
+1.703.483.6383
CANADA
+1.416.900.1272
UK / EUROPE
+44.734.120.5513
INDIA / GULF REGION
+91.22.50323006
ASIA PACIFIC
+66.21056164
FREQUENTLY ASKED QUESTIONS
1
What is ISO 27001?
ISO/IEC 27001 is an international information security standard published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). The standard provides a benchmark for organizations to establish, implement, maintain and improve the information security management system (ISMS).
2
• Adopt a more flexible and risk driven framework for securing information assets
• Ensure security management is kept up to date with the latest security threats
• Ensure vulnerabilities are identified and addressed to lower business risk
• Demonstrate commitment to securing client’s data which has HUGE MARKETING BENEFITS and BRAND VALUE which inevitably drives more business.
Why Should a Company Adopt ISO 27001?
By adopting ISO 27001 certification, organizations can:• Adopt a more flexible and risk driven framework for securing information assets
• Ensure security management is kept up to date with the latest security threats
• Ensure vulnerabilities are identified and addressed to lower business risk
• Demonstrate commitment to securing client’s data which has HUGE MARKETING BENEFITS and BRAND VALUE which inevitably drives more business.
3
Do l need ISO 27001?
The standard is designed for adoption across all types of organizations including enterprises, non-profits and government agencies. The standard is also applicable to companies of all sizes and all industries including healthcare, banking, retail and education.
4
How to get ISO 27001 Certification?
Suppliers and business partners are increasingly requiring that organizations provide a certificate of compliance with ISO/IEC 27001 from a respected and experienced certification body such as ControlCase InfoSec. This provides them with some assurance that the security of their information has been considered and addressed.
5
The information security controls from ISO/IEC 27002 are summarized in annex A to ISO/IEC 27001. Organizations are then free to choose the information security controls that will better address their information risk. Therefore, the key to ensuring adequate selection of applicable controls is to complete an assessment of the company’s information risk – working with a company like ControlCase.
What does ISO 27001 Cover?
Unlike other regulations, ISO/IEC 27001 does not mandate specific information security controls. Instead the standard provided the flexibility that controls required may vary across the wide range of companies that adopt the standard.The information security controls from ISO/IEC 27002 are summarized in annex A to ISO/IEC 27001. Organizations are then free to choose the information security controls that will better address their information risk. Therefore, the key to ensuring adequate selection of applicable controls is to complete an assessment of the company’s information risk – working with a company like ControlCase.