ISO27001 Guidance
Overview
WeShape required ISO27001 accreditation as part of their development and were looking for a partner to provide the required guidance and clarity. The organisation chose to partner with P3M works as a result of previous good works and fair costing.
The Challenge
WeShape were lacking the technical expertise to audit themselves and deliver ISO27001 internally and required external resource to assist them with this. The P3M works team remained accessible thought the process to answer questions and provide expertise when required by the WeShape team. Once WeShape had completed these actions. P3M works conducted a final audit to assess the results. Delivered a final lessons learned and provided advice before WeShape undertook the final iso accreditation one week later. The assessment was passed first time which was as a direct result of P3M Works’ ability the convey information. P3M Works also designed an Information Security Management System for WeShape with the focus on ease of use and compliance.
Our Approach
P3M Works conducted an initial audit using ISO27001 audit pack tools and techniques. The audit was used to inform and teach the WeShape Ops team about ISO27001 and its relevant elements, enabling them to remain current and competent. P3M Works provided advice on the selection of a phishing and cyber alerting tool, constructed cyber policies including risk management policies such as BYOD, and set cyber security objectives. WeShape was then provided with instructions and measurable outcomes that they needed to achieve to pass ISO27001.
The Outcome
WeShape went on the pass their ISO27001 accreditation.
“I’d recommend using P3M Works to support your ISO27001 journey, especially if you value clarity and simplicity in execution.”
About P3M Works
P3M Works partners with clients to develop ambitious cyber and digital strategies to enable a cyber advantage that is delivered utilising effective and innovative project delivery techniques.