SCOPE OF WORK
The service
Support in building and improving the information security management system.
Service activities
- Defining scope and processes
- Risk analysis and control documentation
- Preparing evidence for assessments
The programme begins by assessing which requirements actually apply. Advisory support is not an attestation of compliance; any certification or accreditation is issued by the competent bodies under the relevant scheme.
How the project works
- 01Define
Objectives, scope and responsibilities.
- 02Deliver
Agreed activities and evidence collection.
- 03Report
Findings, limitations and next steps.
Where to start
Describe the systems involved, the issue to address and the project contacts. In our initial discussion, we define objectives, required information and the approach to delivery.