Overview
ISO/IEC 27005 — Information security risk management. AQS provides audit, certification, gap analysis and training services for this standard.
ISO/IEC 27005 addresses information security risk management. AQS helps organisations understand the requirements of the standard, assess their current level of conformity and demonstrate compliance to customers, regulators and partners.
Our services for ISO/IEC 27005
- Gap analysis – an independent assessment of your current practices against the requirements of the standard, with a prioritised action plan.
- Conformity assessment – third-party evaluation and attestation of conformity for organisations that need documented evidence of compliance.
- Awareness & auditor training – practical courses for implementers, internal auditors and management.
- Supplier & second-party audits – evaluate suppliers and partners against ISO/IEC 27005 on your behalf.
Who is it for?
Any organisation – public or private, large or small – that wants to manage information security risk management in a structured, internationally recognised way. It is particularly relevant for professionals working in risk management.
Key benefits
- Demonstrate compliance with a globally recognised benchmark.
- Reduce risk, incidents and non-conformities through structured controls.
- Win tenders and meet customer or regulatory requirements.
- Drive continual improvement with measurable objectives.