Support with the Implementation of ISO 27001:2013 (Reference: ISO 27001:2013) Dec 2019

"We approached AvISO to help us achieve ISO27001 certification. We only had a limited timescale to get the system in place, and we wouldn’t have achieved this without AvISO’s help. Graham is very knowledgeable, approachable and happy to answer any questions. He systematically walked us through the steps to implement the ISMS, putting in place documents and a SharePoint system that are easy to use and future-proof. The auditor was very impressed with the quality of work by AvISO and we achieved what we set out to do well within the timescale set. We’re very grateful for AvISO’s support and would certainly recommend them for anyone looking to implement an ISO standard."

It was a pleasure to work with the Migrant Help team and to assist in the development of their management system. The main challenge was to assess their unique physical locations, particularly as some branches were shared with other organisations. We also needed to consider Migrant Helps wider objectives for remote working and the secure processing of sensitive personal information.

The solution was to use the AvISO checklist and scenario analysis risk methodology, which ensured that all 114 clauses of the ISO 27001 Annex A controls list were addressed. This really helped to identify opportunities for improvement in all business areas and to develop an effective treatment plan.

We also worked with Migrant Help to develop a set of tailored information security policies for key areas such as access control, remote working and physical information security, which included clear guidelines on how to protect sensitive data.