ISO 27001 Gap Analysis

Building an ISMS (information security management system) that meets ISO 27001 requirements can be challenging. An ISMS can assist with compliance to laws and contractual requirements such as DFARS (Defense Federal Acquisition Regulation Supplement), the NIST,  the NYDFS Cybersecurity Regulations and the CSF (Cybersecurity Framework).

Conducting an ISO 27001 gap analysis is an important starting point when putting a prioritized plan in place.

A Management Services Group specialist reviews your current information security posture against the requirements of ISO/IEC 27001:2013.  From the analysis, gives you a starting point for your ISO 27001 compliance.  It gives you the scope for for your ISMS project.

Those not familiar with ISO 27001 implementations and audits, tend to confuse the gap assessment and the risk assessment. Both activities involve identifying shortcomings in your information security management system (ISMS). If your ISMS is relatively immature, it’s a good idea to do the gap assessment early.  Then, typically, one of the first tasks is to prepare a risk analysis.

Contact us to learn more about an ISO 27001 Gap Analysis and to get a quote for our service

---