ISO 27001

Because ISO 27001 is the only internationally accepted standard for information security governance, the number of companies seeking this certification is growing at an exponential rate. Multinationals headquartered in the United States require proof of ISO 27001 certification to add a company to their approved vendor list for procurement purposes. This certification lets the multinational know it’s safe to do business with you because you are genuinely focused on information security.

Testimonials

Insights derived from Armanino's ISO 27001 Internal Audit and Privacy advisory services have helped us mature our ISO Control Framework and build a Privacy Control Framework that aligns to multiple global privacy regulations and standards. These frameworks allow us to demonstrate the maturity of our internal operations to customers and provides the foundation for effective, proactive risk management throughout the enterprise.

Stephen Powell

Director, Operational Risk Management Security, Relativity

Services

Armanino provides clients in a variety of industries with two specific services related to ISO 27001:

Preparation Services: Our robust internal audit approach to ISO 27001 readiness reduces the amount of time it takes to prepare for the certification process. Armanino works with the certifying body to uncover what they are looking for, and we provide that insight on every client engagement. Recently, one of our SaaS (software as a service) clients passed the ISO 27001 certification process on the first attempt with just a few months of preparation. Most companies must make multiple attempts before finally achieving certification.

Information Security Program Development and Testing: Armanino assists your company in developing and documenting your information security policies, procedures and practices to effectively address the information security risks for your unique situation and industry. As your program matures, we offer ongoing controls testing and management of your program to ensure it remains robust and current for an ever-evolving scope of risks.