Organisation’s that are new to information security management systems often ask about the difference between ISO 27001 compliance and ISO 27001 certification. In simple terms, compliance might mean that the organisation is following the ISO 27001 standard (or parts of it).
However, Trust is low nowadays, so switched on powerful stakeholders don’t automatically believe compliance is enough. They want to see certification!
Not all certificates are the same. A consultant, software service provider or your own information security officer could neatly present their own certificate! Some consultants and software providers still do this today, simply certifying their own work, but it’s really not worth the paper it is written on. Customers that understand this subject will want to see some form of independent certification.
The most recognised and acceptable independent certificates are issued by UKAS certified auditors (their logo shown in the image to the right) known as Certification Bodies (and their equivalent internationally). They are organisations that have been evaluated by UKAS to be competent in delivering an independent external audit to an agreed standard and are authorised to issue ISO certificates that can be trusted.
We’ve made more ISO 27001 progress in the last 2 weeks using ISMS.online than we have in the past year.
Easily collaborate, create and show you are on top of your documentation at all timesFind out more
Effortlessly address threats & opportunities and dynamically report on performanceFind out more
Make better decisions and show you are in control with dashboards, KPIs and related reportingFind out more
Make light work of corrective actions, improvements, audits and management reviewsFind out more
Shine a light on critical relationships and elegantly link areas such as assets, risks, controls and suppliersFind out more
Select assets from the Asset Bank and create your Asset Inventory with easeFind out more
Out of the box integrations with your other key business systems to simplify your complianceFind out more
Neatly add in other areas of compliance affecting your organisation to achieve even moreFind out more
Engage staff, suppliers and others with dynamic end-to-end compliance at all timesFind out more
Manage due diligence, contracts, contacts and relationships over their lifecycleFind out more
Visually map and manage interested parties to ensure their needs are clearly addressedFind out more
Strong privacy by design and security controls to match your needs & expectationsFind out more