Information is one of the most valuable and business-critical assets for any organisation. In today’s hyperconnected world, organisations are exposed to large scale information security threats and destructive cyber-attacks. ISO 27001 certification ensures that your organisation has the right controls in place to reduce the risk of serious data security threats and stops weaknesses within your system from being exploited.
An information security management system (ISMS) helps organisations of any size and any sector to take a systematic risk-based approach to manage and secure the sensitive company data. Certification to ISO 27001 provides customers and other stakeholders with confidence that you have implemented industry best practice.
The EU General Data Protection Regulation (GDPR), which will apply from May 2018, makes this even more pertinent. Although the GDPR doesn’t mandate certification, ISO 27001 is a powerful way to demonstrate accountability and compliance.
What we offer
LR recognises that every organisation and its ISMS are unique. The impact of the revision to ISO 27001 will depend upon the complexity of your organisation and the maturity of your information security management system.
You have the option to conduct a gap analysis before certification, during which an assessor will work with you to focus on the critical, high risk or weak areas of your system. We will work with you to determine the scope of your gap analysis to give you the flexibility to focus on the most important areas for your organisation.
ISO 27001 certification
Certification is typically a two-stage process that takes into account the design and implementation of your system. Our approach extends the focus beyond the certificate to an assessment approach designed to help you meet your strategic objectives.
Integrated management system assessment
Organisations with multiple management systems, such as quality, environmental, occupational health and safety and information security management, can benefit from a coordinated assessment and surveillance programme, reducing duplication and cost.
Information Security training
Our range of training services helps organisations and practitioners at every stage of their ISMS implementation and management. Courses include:
• Introduction to ISO 27001
• ISO 27001 Implementation
• ISO 27001 Internal Auditor, Lead Auditor and Lead Auditor Conversion
What are the benefits?
Protect your data and reputation with an ISMS certified to ISO 27001
ISO 27001 certification demonstrates to your stakeholders that you have a systematic, risk-based approach to managing your information assets and implementing controls to protect your organisation from an information security breach. Your ISMS is part of a business continuity plan, which means that you’ll be in a good position to recover quickly should the worst happen.
Stay one step ahead
Compliance requires you to identify applicable legislation, including the GDPR, which has a positive impact on risk management and corporate governance. It will give your clients confidence that you have the controls and procedures in place to avoid data breaches and cyber attacks, which can give you a competitive edge during tendering processes, positioning you as a trusted supplier.
Why choose LR?
Our assessors are qualified professionals with sector-specific information security and IT experience who are matched with your business needs, enabling an effective and robust audit of your system. We’re expert in not only understanding the potential in cutting-edge ideas, but applying this pragmatically in ways which guarantee impact today and in the long-term.
Your business helps LR to help others
The profits we generate fund the Lloyd’s Register Foundation, a charity that supports engineering-related research, education and public engagement around everything we do. All of this helps us stand by the purpose that drives us every single day: working together for a safer world.
Independent & Impartial
We maintain our independence and impartiality by proactively managing conflicts of interest across all LR businesses including those which may exist between consultancy and third-party certification services. We will not offer consultancy services for any management system that is in the process of or has completed accredited third-party certification with LR. Further, if we are already providing consultancy services relating to a management system, we will not offer any accredited third-party assessment services.
Who we work with
We help businesses across dozens of sectors push forward and achieve like never before. How can we help you?
Peter Döhle Group: optimally organised with Cloud Fleet Manager
Cloud Fleet Manager gives Peter Döhle Group an efficient and reliable global business system that connects onshore staff, offshore crews and external business partners.
LR's experts regularly share their research and insights.
Join us at these forthcoming events
7 Aug 18
Malaysia World Maritime Exhibition 2018
Kuala Lumpur, Malaysia
27 Aug 18
4 Sep 18