Migrating to ISMS.online

With ISMS.online it’s a simple task

If you need to improve your ISMS, moving it onto our simplified, secure, sustainable platform will bring immediate benefits. We can help you achieve any of these goals and more:

Become ISO 27001 compliant or certified

That can be a big step. To achieve it, we’ll help you grow (and show you’ve grown) the transparency, visibility and control of your current ISMS.

Achieve more standards or comply with more regulations

That can put a lot of pressure on you and your team. You’ll need to involve and co-ordinate more people and more information. Our platform makes that simple.

Keep up with a rapidly-growing organisation

A home-made ISMS can work for small organisations. But it’ll create compliance, control and maintenance issues as the organisation grows. We offer a more powerful solution.

How we’ll help you move quickly to improve your ISMS

If you need to change quickly we’d suggest a lift and shift approach to address immediate issues, achieve quick wins and retain what’s already working. That’ll help you:

• Move as quickly as possible
• Gain stakeholder buy-in
• Show you’re taking urgent, focussed action

Our platform is visible and transparent, with built-in focus tracking, making it easy to show interested parties just how quickly and effectively you’re moving. You’ll be up and running within hours and days, not weeks, as many of our other customers have been.

One organisation came to us shortly before their recertification audit. They hadn’t addressed previously highlighted issues, so knew their certification was at risk if they didn’t take prompt action.

Within a couple of weeks we helped them:

• Migrate all their existing documentation onto ISMS.online. They still held it in spreadsheets and Word documents, but our built-in review, approval and reminder processes meant they could manage it much more effectively.
• Subscribe to our supplier management feature. They added all their key suppliers’ contract and contact details, and adopted our suggested Annex A 15.1 supplier management policy, addressing a specific issue raised in a past audit.
• Move their most significant risks across to our risk map and treatment plan. Our system made it easy for them to link those risks to the relevant information assets, and policies and controls.
• Upload their old risk map to cover off their less significant risks. They noted that risk migration would be completed over time on our Corrective Actions and Improvements Track. That met a previous audit goal of improving their risk management approach.
• Clarify treatment, and assign review, management and ownership of all risks, in line with ISO 27001 requirements.
• Automate their Statement of Applicability, replacing their previous complex, confusing, hard to update spreadsheet with one created using our own dynamic tool.

They continue to use our platform, evolving their ISMS to include features like our Policy Packs and overview reports.

And of course you’ll want to think about longer term improvements once the initial pressure is off. Our platform will help you set up an improvement cycle that’s right for your organisation’s culture, resources and appetite for change.

How we’ll help you rethink your ISMS if time is less of an issue

If you don’t have an urgent, specific deadline, you can take a more thoughtful approach.

One customer wanted to completely rethink their ISMS documentation as they brought it into ISMS.online. They set up a carefully planned change process, moving forward in clear, regular steps.

That meant reviewing every existing piece of documentation, then converting it all into easily digestible policies or controls for migration onto our platform. They used our optional Policy Packs feature to make sure the relevant staff understood and complied with each one. They’re now a much more secure organisation, with significantly fewer incidents to deal with.

They also took the opportunity to rethink their risks, information assets and other work lost on old spreadsheets. Our risk management and information asset tools helped them create:

• Meaningful risks to manage
• Up-to-date information assets
• Policy and control clarity

And it was easy for them to see how they were progressing at every stage of their migration, thanks to our progress reporting tools and the visual nature of our platform.