What ISO 27001 is
ISO/IEC 27001 is the international standard for an information security management system (ISMS): the policies, risk assessment, controls and continual improvement that keep information confidential, intact and available. Certification is granted by an accredited certification body after an external audit, and it is maintained through surveillance audits.
How Raqmana runs the programme
- Training. Your team learns the standard and its requirements. Raqmana's training track T3, Information Security & Cybersecurity Strategy, covers the strategic side.
- Implementation. Scope, risk assessment, policies and controls, with risk and maturity scoring.
- Audit. An internal audit checks that the system works before the external audit.
- Certification. Support through the certification body's audit.
Related standards in the same programme
- ISO 9001: quality management
- ISO/IEC 27701: privacy information management, an extension of ISO 27001
- ISO 31000: risk management guidelines
- ISO 22301: business continuity management
Keeping compliance current
The Cybervergent platform, Raqmana's exclusive GRC partner, automates compliance tracking for ISO, NIST, SOC 2 and PCI DSS in one executive framework, in Arabic and English, with on-demand visual reports.
Who it is for
Banks, energy operators, ministries and telecom networks that need to show customers, partners and regulators that information security is managed, not improvised.