Question 1

What is ISO 27001?

Accepted Answer

ISO 27001 is a globally recognised standard in the field of information security. As an organisation, you therefore need to have your information security in order. A data breach not only has financial consequences for your organisation, but also affects your reputation.

In the ISO 27001 standard all information security requirements are laid down. With certification against this standard, you demonstrate that you have a working information security management system. Moreover, certification is a requirement in many tenders.

Question 2

Why is ISO 27001 certification important?

Accepted Answer

If, as an organisation, you do not secure your business data the data of your customers, suppliers or stakeholders, the consequences can be dire. For instance, a hack or data breach can cause this sensitive information to be out in the open with all the consequences that entails. With an ISO 27001 certification, you ensure that the set of measures, processes and procedures to minimise a data leak or unwanted access to important information such as personal data, intellectual property, business-sensitive information or information from customers and relations is in place. This provides confidence for others to do business with your company.

Question 3

How can you achieve ISO 27001 certification as a company?

Accepted Answer

You can purchase the ISO 27001 standard through the NEN. To obtain certification, an ISO 27001 audit is required first. This is where DigiTrust can help you. Our certification process has a number of logical steps.

Question 4

What is the investment for ISO 27001 certification?

Accepted Answer

Curious about the investment of an ISO 27001 certification and how they are structured? The basis of the audit time and therefore the cost starts with the number of FTE working within the scope of certification, the number of full-time equivalents. It then looks at the complexity of the IT landscape and your organisation in general. Which products/services and processes play a role within your scope of certification? Questions that come into play here are: Which (critical) sectors do you operate in? Do you develop software? Do you have your own server or do you store data in the cloud? These factors, among others, determine the complexity of the information security management system and determine the final number of audit days and thus the costs involved in obtaining ISO 27001 certification. To get a good idea of this, we will always send you our intake form.