ISO 27001 Information Security Consultancy

Vertex supports implementation of ISO/IEC 27001:2022 through a risk-based ISMS that connects information assets, security risks, the Statement of Applicability, Annex A controls and evidence.

Core ISMS components

• ISMS scope
• Information-security policy and governance
• Risk assessment methodology
• Risk assessment and treatment
• Statement of Applicability
• Annex A control selection and implementation
• Competence and awareness
• Incident management
• Monitoring and measurement
• Internal audit
• Management review
• Corrective action and improvement

Practical warning

The Statement of Applicability should reflect the organization’s real risks and implemented controls. It should not be copied from another organization as a generic checklist.