ISO 27001 Information Security Management System

The international standard ISO/IEC 27001:2022 defines the requirements for the establishment, implementation, maintenance and continuous improvement of the information security management system (ISMS). Information security is primarily:
– confidential
– integrity preservation
– availability of information
ISO 27001, like ISO 9001 and ISO 14001, is based on a process approach. One of its evident advantages is a comprehensive approach to information security, as well as the lack of imposed detailed technical requirements for a given security area. The standard is still flexible in operation, because how to secure certain areas depends on the organization itself.
The implemented and certified ISO 27001 system proves to contractors and business partners that information security is a goal for the organization. In addition, it is an excellent introduction to the GDPR Ready certification, which confirms the compliance of the functioning procedures and IT systems with applicable legal regulations. The integration of the ISO 27001 and GDPR Ready standards is a unique product offered only by CeCert


Main areas of the standard:

  1. physical security;
  2. personal security;
  3. ICT security;
  4. legal security;

Certification benefits:

  1. greater competition in the market;
  2. effective supervision and ensuring information security in the organization;
  3. minimized risk of data loss or interception;
  4. structured procedures, processes and responsibilities;
  5. a convenient tool for managing risk in the organization;
  6. independent risk verification and assessment;
  7. business continuity guarantee;
  8. additional points in tenders;
  9. additional points in contracting with the National Health Fund;

Selected CeCert customers:

Do you have questions or concerns?

Contact us!