Security Program Assessment (Phase I)

In this phase, Orange Parachute evaluates your current information security program for conformance to ISO 27001 strategic, tactical, and operational requirements. Many organizations already have some form of Information Security Management System in place, although it may be informal. We assess your current infrastructure for "re-usability", in order to not "re-invent the wheel". This assessment serves as a foundation for enhancing corporate governance and establishing a formal Information Security Management System (ISMS).

Timeline: 2-weeks

Deliverables:

• ISO 27001 Assessment Tool
• Section 4-8 Mandatory controls
• Annex A Discretionary controls
• Written Gap Analysis Report

Next Phase: ISMS Framework Development