Iso 27001

Good morning, Dave.

It might be worth checking out whether this is something that your competitors are accredited to, before spending any time or money.

Hi hdm

Done some checking around and yes ISO 27001 & 27002 have been achieved by potential competitors. There are also a number of others that are advertised such as ISO 17020 and 17025 - which may well become mandatory.

Looks like it's going to be the way to go. On a plus side I'm about to start writing a governance section in an IT strategy doc. That will include ISO 27001 as an objective. Should be able to gain a fair bit on help from that to transfer to my own co.

Regards
Dave

My own 2 cents worth would be that a company that had it would not make me spend money over a company that did not have it.

Having worked for an ISO 9010 company who had no clue how to run a company made me realize it was a joke.

Yes, I can understand that, but in our experience there are potential customers that insist on ISO certificates when looking for a new supplier, especially the larger organisations.

My company is going through this now, We needed to get accredited to provide a certificate to one of our customers that we have taken on data disposal contract with.
From what i can see you can do it yoursef for around

Hi Conrad

Thanks for this info. I'd be interested if you could suggest a "ball park" figure of what it's costing your company. I have one quote that starts at