Many organizations are actively looking to improve information security practices and establish formal programs for enterprise security. For some, the goal is to improve overall compliance with regulations and internal security requirements, while others seek to prove effective security and privacy practices to third-party partners, vendors and customers. As a template for security management, many are turning to internationally recognized information security standards such as "ISO 27001 - Information Security Management Systems - Requirements" and the companion standard "ISO 17799 - Code of Practice for Information Security Management".

To help organizations establish the plan for moving forward in building and adopting manageable security programs based on ISO standards, Accuvant has developed a comprehensive ISO Gap Analysis service. Through this offering, Accuvant guides clients through the cycle of evaluating their current state of information security programs against best practices defined by ISO 27001 and ISO 17999, identifying deviations in existing security controls and defining the steps necessary for improvement.


Aligning with ISO 27001 has numerous benefits, including:

• Global acceptance. The ISO standards have attained a level of acceptance internationally that make them the de facto standard for information security management practices.
• Strong program development approach. The ISO standards represent a holistic approach to information security that is required for compliance.
• Program certification. ISO 27001 offers organizations the
  opportunity to get a third-party certification of information security management practices.

Upon completion of a project, clients receive detailed reports including:

• Strengths and weaknesses of the current program
• Risk assessment of ISO topic areas, including policy, organization, access control and compliance
• Recommendations for improvement, and
• A roadmap of activities necessary to move the organization toward compliance with the elements of the ISO standards

If you would like more information about Accuvant's ISO 27001 solutions, please email info@accuvant.com or contact our sales department at 1-800-574-0896.