Guide · GRC-BC-ISMS

ISO 27001 certification in Libya.

From the first training session to the certificate: an information security management system that holds up to audit.

Short answer

Raqmana takes Libyan organisations through ISO/IEC 27001 in four stages: training, implementation, audit and certification. The same programme covers ISO 9001, 27701, 31000 and 22301, and sits in the GRC-BC-ISMS pillar of Raqmana's Next-Gen Strategy, supported by the Cybervergent compliance platform.

What ISO 27001 is

ISO/IEC 27001 is the international standard for an information security management system (ISMS): the policies, risk assessment, controls and continual improvement that keep information confidential, intact and available. Certification is granted by an accredited certification body after an external audit, and it is maintained through surveillance audits.

How Raqmana runs the programme

  1. Training. Your team learns the standard and its requirements. Raqmana's training track T3, Information Security & Cybersecurity Strategy, covers the strategic side.
  2. Implementation. Scope, risk assessment, policies and controls, with risk and maturity scoring.
  3. Audit. An internal audit checks that the system works before the external audit.
  4. Certification. Support through the certification body's audit.

Related standards in the same programme

  • ISO 9001: quality management
  • ISO/IEC 27701: privacy information management, an extension of ISO 27001
  • ISO 31000: risk management guidelines
  • ISO 22301: business continuity management

Keeping compliance current

The Cybervergent platform, Raqmana's exclusive GRC partner, automates compliance tracking for ISO, NIST, SOC 2 and PCI DSS in one executive framework, in Arabic and English, with on-demand visual reports.

Who it is for

Banks, energy operators, ministries and telecom networks that need to show customers, partners and regulators that information security is managed, not improvised.

Questions

Common questions.

Does Raqmana issue the ISO 27001 certificate?

No. Certificates are issued by accredited certification bodies after an external audit. Raqmana prepares your organisation and supports you through that audit.

Which other ISO standards can be included?

ISO 9001, ISO/IEC 27701, ISO 31000 and ISO 22301, in the same programme.

Where does ISO 27001 sit in the Next-Gen Strategy?

In the GRC-BC-ISMS pillar: governance, risk and compliance, business continuity and information security management.