Home :: Consulting :: Process Improvement

Information Security Management System (ISMS)

» ISO 27000:2005

ISO 27000:2005 (BS 7799)

An Information Security Management System (ISMS) provides a systematic approach to managing sensitive information in order to protect it. It encompasses employees, processes and information systems.

The world renowned British Standard for Information Security Management Systems, BS 7799-2:2002, has been updated and was released on the 15 October 2005 as an international standard, ISO/IEC 27001:2005.

ISO 27001 defines comprehensive requirements for an ISMS that deals with all the technical and Human aspects in information security in all its operational processes. Companies can be independently audited to ISO 27001and achieve registration to show their customers, partners and regulatory bodies that their processes are secure in handling information.ISO 27001 refers to ISO 17799 for implementation guidance and includes an abstract of ISO 17799 as an appendix showing auditors the kinds of control to expect.

The goal of ISO 27001 is to provide a common base for developing organizational security standards and effective security management practice and to provide confidence in inter-organizational dealings.

To know more about ISO 27001 and our deliverables through our unique process approach, click here or contact us for a Zero Cost discussion.

IT Service Management System (ITSMS)

» ISO 20000:2005

ISO 20000:2005 (BS 15000)

About BS 15000 (ISO 20000)
Derived from ITIL (the global de facto standard for best practices in IT Service Management), the BS 15000 provides a recognized framework as the basis for sound IT service management controls, enabling an organization to plan, manage, deliver, monitor, report, review and improve its IT service management to better support business requirements.

The BS 15000 standard is applicable to organizations of all sizes, which are:
• Providers of ‘Managed IT Services’.
• Businesses that are outsourcing their IT services
• Internal IT departments / businesses managing their own IT services.

BS 15000 certification provides a trust and confidence to customers and partners that your organization has processes and procedures in place to demonstrate compliance with IT Best Practices.

BS 15000 standard is published in two parts:
• BS 15000-1:2002
IT Service Management Part 1: Specification for Service Management.
• BS 15000-2:2002
IT Service Management Part 2: Code of Practice for Service Management.

New Update – The ISO 20000 series :
The new standard ISO 20000-1:2005 “Information technology service management – Specification for Service Management” was published on 15 December, 2005. It replaces BS 15000-2:2002.
From 15 June 2006, organizations will be assessed to the new international standard ISO/IEC20000-1:2005.

To know more about ISO 20000 and our deliverables through our unique process approach, click here or contact us for a Zero Cost discussion.