ISO 27001 – Global Certification Indonesia

What is ISO 27001?

ISO 27001 is a specification for the management of information security. It is applicable to all sectors of industry and not confined to just information held on computers. Information may be printed or written on paper, stored electronically, transmitted by post or email, shown on films, or spoken in conversation. Whatever the media the information takes, or means by which it is shared or stored, the ISO 27001 standard assists in providing a system approach an organisation ensure it is always appropriately protected.

Information security can be characterised as:

Confidentiality, ensuring that access to information is appropriately authorised
Integrity, safeguarding the accuracy and completeness of information and processing methods
Availability, ensuring that authorized users have access to information when they need it

Why apply for ISO 27001 certification?

Information is now globally accepted as being a vital asset for most organisations. Therefore the confidentiality, integrity, and availability of corporate and customer information may be essential to maintain competitive edge, cash-flow, profitability, legal compliance and commercial image.

The ISO 27001 standard is intended to assist with these risks. It is easy to imagine the consequences and damage to a brand or organisation if its information was lost, destroyed, corrupted, burnt, flooded, sabotaged or misused.

Requirements of the ISO 27001 standard?

The main requirements of the standard can be categorised as follows:

GlobalGROUP Security policy GlobalGROUP Communications and operations management
GlobalGROUP Organisational security GlobalGROUP Access control
GlobalGROUP Asset classification and control GlobalGROUP System development and maintenance
GlobalGROUP Personnel security GlobalGROUP Business continuity management
GlobalGROUP Physical and environmental security GlobalGROUP Compliance

What are the benefits of ISO 27001 certification?

GlobalGROUP Demonstration of credibility and trust GlobalGROUP Proven business credentials
GlobalGROUP Establishes that laws and regulations are being met GlobalGROUP Openings in new markets
GlobalGROUP Ensures commitment to on-going information security GlobalGROUP Customer satisfaction
GlobalGROUP Provides confidence to stakeholders, customer, trading partners, employees  

What is the certification process?

The certification process is in three simple steps:

Application for certification

Complete the on line form for GlobalGROUP to send a quotation.

Initial Certification Audit

The assessment process is based on a 2 stage approach as follows:

Stage 1 – a basic audit to check whether the organisation is in a state of readiness for the stage 2 audit and involves the following:

GlobalGROUP Confirm that the quality manual conforms to the requirements of the ISO 27001 GlobalGROUP Production of a report that identifies any non-compliance or potential for non-compliance and
GlobalGROUP Confirm the scope of certification including any justifiable exclusions GlobalGROUPProduction of an assessment plan and confirm a date for the stage 2 assessment visit.
GlobalGROUP Check legislative compliance GlobalGROUP Agree a corrective action plan if required.

Stage 2 – the purpose of this visit is to confirm that the quality management system fully conforms to the
requirements of ISO 27001 in practice and involves the following:

GlobalGROUP Undertake sample audits of the processes and activities defined in the scope of assessment GlobalGROUP Produce an audit programme and confirm a month and year for the first surveillance visit
GlobalGROUP Document how the system complies with the standard GlobalGROUP Report any non-compliances or observations

Contact us

For more information about ISO 13485 please contact us by phone or email at gci@global-certification.co.id. We will be pleased to assist you.