ISO27001 security audits

Your security infrastructure has to evolve - but changes but to individual elements may not be managed in the context of the whole security system. This coupled with the regular emergence of new security threats, means that it is important to review your security systems periodically.

Network performance and business processes may be impeded because of cumbersome security controls and procedures.

Data Integration can review most technical and process aspects of your Information Security Management System to ensure it conforms to your policy. We can also benchmark your existing policy against industry standards such as ISO27001 and perform a gap analysis to determine where your security practice falls short of stated policy.

Examples of the areas that you may wish to review include:

• Incident management and response systems
• Event monitoring systems
• O/S hardening procedures
  
  
• Change control procedures
• Business continuity plans
• Perimeter network security
• Security of third party access
• Network infrastructure security
• Virus and content security
• Security of extranet and Internet resources
• Access control rules
• Mobile resources and remote working systems

Our reviews are designed to help you identify all the elements used to secure your organization and benchmark them, or advise you about how they could be improved. Whatever aspect of your security infrastructure you ask us to investigate, our findings and recommendations will be fully documented in a detailed report which can provide the valuable evidence needed to justify the cost of remedial action.