Overview
ISO/IEC 27008 — Assessment of information security controls. AQS provides audit, certification, gap analysis and training services for this standard.
ISO/IEC 27008 addresses assessment of information security controls. AQS helps organisations understand the requirements of the standard, assess their current level of conformity and demonstrate compliance to customers, regulators and partners.
Our services for ISO/IEC 27008
- Gap analysis – an independent assessment of your current practices against the requirements of the standard, with a prioritised action plan.
- Conformity assessment – third-party evaluation and attestation of conformity for organisations that need documented evidence of compliance.
- Awareness & auditor training – practical courses for implementers, internal auditors and management.
- Supplier & second-party audits – evaluate suppliers and partners against ISO/IEC 27008 on your behalf.
Who is it for?
Any organisation – public or private, large or small – that wants to manage assessment of information security controls in a structured, internationally recognised way.
Key benefits
- Demonstrate compliance with a globally recognised benchmark.
- Reduce risk, incidents and non-conformities through structured controls.
- Win tenders and meet customer or regulatory requirements.
- Drive continual improvement with measurable objectives.