The process which is needed to obtain an ISO 27001 certificate on the basis of IT-Grundschutz is often expensive and complicated. The many security problems and gaps which are present within an organisation are often not known in advance and are only discovered gradually during preparation for the certification itself. This means that the generation and continuous adaptation of the documentation which is relevant to certification costs a great deal of time and money. To accelerate the development of your ISMS, TÜViT offers you a useful entry into the IT security process in the form of an assessment. The assessment procedure is based on technical tests (using tools for network and system analysis), augmented by relevant interviews and inspections on site.
Our service
Definition of the items to be examined
Structural analysis and modelling
Security scans using tools for network and system analysis
Interviews on defined subjects with the relevant experts
On-site inspections and configuration analyses of technical systems
Creation of comprehensive sets of statistics
Description of hazards and all weakness clusters
Recommendations for improving the IT security level
Drafting of the procedure for entry into the ISMS Certification Process according to IT-Grundschutz
Detailed reporting and presentation of results on site
Benefits/Usefulness to you
Structured procedure focused on most fundamental security aspects
Efficient discovery of weaknesses within the IT security system
Recognition of security problems even before use of the actual IT-Grundschutz methodology
Suggestions on how to eliminate security problems with targeted recommendations
Early recognition of fundamental obstacles to the realisation of a sustainable IT system which is always appropriate to requirements
Reduction of costs for development of IT-Grundschutz according to BSI rules
The procedure
Documentation analysis
Security scans
Configuration analyses
Inspections
Interviews
Reporting
The objective
Control of scheduling and budget within the ISO 27001 certification process on the basis of IT-Grundschutz
Increase in the effectiveness and efficiency of your IT-Grundschutz project
Your contacts:
IT Security Mr. Dipl.-Ing. Adrian Altrhein Leimbachstraße 227 57074 Siegen Germany Phone: +49 271 3378 - 195 Telefax: +49 271 3378 - 197 Send secure email