ISO 27001 provides a process framework for IT security implementation and can also assist in determining the status of information security and the degree of compliance with security policies, directives, and standards. ISO 27001 requires a company to establish, implement and maintain a continuous improvement approach to manage its information security management systems (ISMS).
ISO 27032 addresses “cybersecurity” or “the cyberspace security”, defined as the “preservation of confidentiality, integrity and availability of information in the cyberspace”.
ISO 27035 provides procedures on cyber incident response. To manage these incidents effectively, organizations need to implement effective controls (detective and corrective controls) designed to recognize and respond to events and incidents, minimise adverse impacts, gather forensic evidence (where applicable) and in due course ‘learn the lessons’ in terms of prompting improvements to the ISMS, typically by improving the preventive controls or other risk treatments.
CyberHawk offers consultancy services to define and implement GRC, ISO 27000 family (001, 032, 035), NIST, and others, as well as their implementation.
