ISO 27001 Alignment Service
The challenge
Safeguard confidential data
Any organisation that has confidential information they need to protect such as customer data, payroll information, financial data or intellectual property should consider aligning with or getting fully certified to ISO 27001.
Demonstrate compliance
Organisations may be subject to regulations such as GDPR, HIPAA or the EU NIS directive; by aligning and certifying to ISO 27001, it can help demonstrate adherence to these regulations.
Unlock enterprise opportunities
Organisations may have to show that they follow best practice information security to become an approved supplier to a larger enterprise. Certification to ISO 27001 may also help reduce cyber insurance premiums.
The service
ISO 27001 is an internationally recognised and widely adopted standard for information security. It takes a risk-based approach to securing an organisation’s most valuable information – whether that’s in digital or physical form.
Expert Implementation of ISO 27001 and ISO 27701 Standards
ISO 27001 helps you manage risks to your business from accidental or deliberate misuse of confidential information. Above all, complying with ISO 27001 provides you with a best practice framework for managing information security. Unlike self-regulated standards, being certified to ISO 27001 involves having an independent verification, at least once a year, that demonstrates security is being managed appropriately.
ISO/IEC 27701:2019 is a privacy extension to ISO/IEC 27001 and organisations who are already certified to ISO 27001 will now be able to also certify to ISO 27701. The idea behind this new extension is to enhance the existing Information Security Management System (ISMS) with additional requirements in order to establish, implement, maintain, and continually improve a Privacy Information Management System (PIMS).
BH Consulting help clients implement ISO 27001 and ISO 27701 efficiently and effectively, whether they are looking to achieve full certification or just wishing to align with ISO 27001. We have specialist consultants dedicated to guiding organisations through the alignment process and on towards certification.
Path to ISO 27001 Success
Whether the aim is to measure current information security practices against ISO 27001, or achieve certification to the standard, we provide the following steps:
Phase 1 – ISO 27001 Gap Analysis with report itemising gaps in security management and controls, with recommended resolutions.
Phase 2 – ISO 27001 Risk Assessment (including assistance building a risk register or adapting an existing register)
Phase 3 – Alignment of Information Security Management System (ISMS) with ISO 27001 Requirements (including development of any missing or incompatible policies)
Phase 4 – Implementation Process (including an Internal Audit prior to the certification process starting to validate readiness)
These services can be carried out remotely.
Benefits
Manage your IT security risk
Improve your business processes
Keep confidential data secure
Demonstrate compliance with the security requirements of trading partners
Protect your organisation’s reputation
Lessen the burden of completing 3rd party security questionnaires
Testimonials
“We engaged the services of BH Consulting in September to act as our DPO. They have expertly guided us through our GDPR journey, helping us to finalise our requirements to meet the GDPR standards. They have done this in a professional manner all the while aware of our limited time resources. Our DPO Annemarie, understands the way in which we work and has completely adapted her approach to suit our needs. I couldn’t recommend Annemarie and the team at BH consulting highly enough.”
“We found BH Consulting to be a huge help in achieving our ISO 27001 certification as they put so much structure on the process and helped us along every step of the way. Their knowledge and guidance the whole way along the journey was reassuring and really made the process seamless and easy to follow and understand. They were there to keep us accountable and ensure we were progressing at our bi-weekly meetings. We would definitely recommend BH Consulting to any organisation thinking of going for ISO 27001 certification and so quickly and cost effectively was a massive relief. The expertise BH Consulting provided to ensure we have a robust GDPR compliance framework in place was great. We would have no hesitation recommending BH Consulting to others in a similar position.”
“Make-A-Wish Ireland has been working with BH Consulting for three years and have found them to be incredibly supportive. GDPR can be extremely challenging and yet, for an organisation like ours, it is critical to be on top of everything at all times as we deal with such highly sensitive data. The support we have been given is practical, logical, and most importantly calming. They have demystified the complexities and have done repeated training with our team in order for everyone to be comfortable with all aspects. We would highly recommend any company to work with BH Consulting. A special thanks must go to Tracy Elliott who has worked with us since the start.”
“BH Consulting have been our CISO since February 2019 and we have found their expertise to be extremely beneficial. They are very accessible when we need them and are very pragmatic in the advice they give. We really like the fact that they are independent and not tied to any vendors or solutions. We have confidence that BH Consulting are there with the right expertise and advice when we need them.”
“BH Consulting provide a reliable and valuable service to our organisation. Their expertise and continued guidance has been a great support to us since the introduction of GDPR.”
Why get in touch with BH Consulting
BH Consulting is a trusted, independent cybersecurity and data protection consultancy with over 20 years of experience. Whether you need expert guidance on compliance, risk management, or security strategy, our team delivers practical, vendor-neutral advice tailored to your needs.
- Trusted by global brands and public sector bodies
- ISO 27001-certified team with deep domain expertise
- Proven track record in delivering real-world solutions
- Flexible services: CISO/DPO as-a-Service, audits, training & more
Let’s start a conversation about securing your business.
