360inControl® - Blog | Heike Klaus/7. Dezember 2023/Governance Risk & Compliance, Information Security Management System (ISMS)
Milestone 1
We determine the status quo based on ISO27001:2022 during the first two days.
At this stage, we do not focus on reviewing individual systems. It is all about assessing how ready and mature your organization is to operate an ISMS.
We check, if required policies and relevant ITIL processes exist and review them. Furthermore, we check management commitment and other essential success factors.
The result is an assessment report that shows the status quo, identifies gaps and serves as a basis for building and expanding the ISMS.