

Dionach provide consultancy for implementing and reviewing an Information Security Management System (ISMS), which is the system that an organisation must have in place to be certified to ISO 27001, or to follow the guidelines in ISO 27002.
Dionach can provide a gap audit to determine areas in your current security policies, procedures and practices that need improvements to meet the requirements of ISO 27001.
Dionach can work with your ISMS manager to implement an ISMS with as much or as little days as needed. This can mean anything from a single day's training for management through to consultants drafting policies, procedures and attending ISMS meetings.
Dionach assist our clients in determining the scope of the ISMS, the risk assessment process and the security policy. Dionach will also help identifying controls in each of the areas, such as business continuity management and media handling.
The standard specifies that the organization shall conduct internal ISMS audits at planned intervals to determine if the ISMS conforms to the standard and requirements, is effective, and performs as expected. The standard also specifies that selection of auditors shall ensure objectivity and impartiality. Dionach carry out the full range of ISO 27001 internal auditing, from auditing the risk assessment to auditing business continuity management.
Dionach provide ISO 270001 annual audits as required by the UK Gambling Commission. These annual audits meet the requirements of section 5 of the Gambling Commission's Remote and Gambling Software Technical Standards.