Governance Risk Compliance
Appropriately managing an organisation's Information Security Risk requires the selection and deployment of appropriate controls in the context of the risk attitude and culture of your business.
Mitigation measures or controls should work cohesively, taking account of cross-functional business requirements to create a system of integrated controls, technologies and processes, all implemented, monitored and managed to maintain effectiveness. The controls and risk mitigation activities selected may need to address specific requirements to meet financial, operational, legal, compliance and business risk obligations.
With over 20 years of experience, commissum is adept at offering practical advice and recommending cost-effective solutions, to deliver a joined-up, coherent approach to protecting an organisation's information assets.
Whether it involves the traditional approach of measuring an organisation against best practice using an ISO27001 Gap Analysis, formal assessments against government frameworks such as the HMG Security Policy Framework (SPF), or a more radical review focused on cost optimisation, commissum has a track record that holds its own with the best.
Many organisations, faced with the challenge of getting to grips with information security risks choose to adopt best practice and perhaps certify to the ISO27001 Code of Practice for Information Security Management (indeed, commissum would usually recommend doing so). This ISO standard sets out, in practical terms, how the implementation of an Information Security Management System (ISMS) can enable information risk to be managed to a level acceptable to the business. In essence it states that an effective ISMS will have the following characteristics:
- Executive support.
- Embedded into the organisational culture.
- Business risk-driven and proactive.
- Aligned to a strategic framework.
- Delivering legal and regulatory compliance.
- Set into a robust policy environment.
- Supported by active training and awareness.
- Solid technical controls.
commissum fully endorses such an approach and works with organisations to maximise the benefits that arise, while minimising the costs of implementation.
Get in touch with one of our security consultants today
- No obligation
- Expert advice
- Tailored solutions
"commissum provided us with a high quality service. We found the project team helpful and flexible in responding to changes in requirement; the technical staff in particular were excellent. All commitments including deliverable timescales were met and I would have no hesitation in recommending commissum.”
Mr A Moretti, Executive Director for IT Security Risk Management, Global Investment Bank
Latest News
UK cyber-security among the world's best in recent report
A new report collates the views of international cybersecurity experts to grade several countries according to the strength of their defence against Internet attacks.  The report, sponsored by the computer security company McAfee, ranks Israel, Finland and Sweden as the top-performing countries, with four and a half out of five ...Tue 31 Jan, 2012 //
McAfee fixing spamming bug in anti-malware software
McAfee, the prominent anti-malware software firm, has been fixing a flaw discovered in its software that would allow a spammer to use an infected machine to send floods of spam emails.The flaw was found in McAfee’s “SaaS for Total Protection” cloud-based anti-malware software.  The flaw crucially depended on the software’s ...Fri 27 Jan, 2012 //
Beware! Ransomware Attacks Are On the Rise
Cloud security company Panda Security, have announced on their blog PandaLabs, that ransomware attacks are increasing. Not only are the attacks more common but also more sophisticated. Leaving personal and business users having to face new major threat in the coming year.What Is Ransomware?Ransomware is a type of malware, that ...Tue 24 Jan, 2012 //
