RNR Consulting

ISO/IEC 27001
Home ISO/IEC 27001

Here we understand the business and ISMS context. We schedule meetings with all the decision makers at various levels (geography, departments, branches) to understand the business processes in great detail.

It includes asset identification, risk assessment and existing control identification. We map out existing and required security infrastructure of all business processes. We then determine the deviation from the necessary requirements and make action plans to fill the gaps.
In this phase we help implement a detailed list of compliance for the organisation. Every department, every team in the scope is provided with a list of security and access controls, communication channels, SOPs etc. We then conduct an efficiency check to determine the efficiency of the controls introduced.

This phase is also called as the ISO 27001 Pre-Audit. Under this phase we securely check whether the controls implemented and the processes introduced are being followed in the organisation. The tests check the level of ISO 27001 implementation as well as its adaptation in the organisation.

Certification process is carried out by independent auditors, not by the implementers. We bring the auditor for the certification process. Thus, we take care of end-to-end process from scope determination to certification making the whole process easy for the client.

33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
52 (1)
51 (1)
53
54
55 (1)
1 (1)
2 (1)
10
8
9
6
11

ISO 27001

We Help Your Organization Become ISO 27001 Compliant

ISO 27001 aims to protect information in all forms. Kratikal has a 5-phase approach that starts with determining the scope of work, followed by determining the ISMS objectives. This is followed by risk assessment and gap analysis, where we recommend and advise you additional security controls. Our detailed risk assessment includes technical and non-technical infrastructure.

    Service Request Form

    Select Service(s) You Want:

    Information & cyber security program strategy & roadmapEnterprise & cyber security risk assessment & managementThird party risk managementVirtual CISO serviceCyber security awareness programPhishing simulation programThreat modelingUser access governance & certificationIncident management and response planISO 27001/22301/27701/9001RBI master directionNHB cyber security guidelinesIRDAI cyber security guidelinesNIST FrameworkSOC1/SOC2Data localization as per RBI circular of storage of payment system dataCIS frameworkInternal audit managementCloud assessment as per CISDesigning cloud security architectureCSPM security monitoringGap assessment as per applicable guidelinesNetwork architecture reviewFirewall rule reviewFirewall configuration reviewSystem hardening checksVulnerability assessment program managementWeb application penetration testingMobile application penetration testingInfrastructure vulnerability assessmentAPI vulnerability assessmentAPI fuzzingRed teaming ExerciseData protection advisoryData flow diagramDigital personal data protection acData protection controls implementationData discovery and classificationDesigning of data protection policyData governance programDigital personal data protection acGap assessmentArticulation of policy and proceduresISO 27001/22301/27701/9001, PCI-DSS, SOC1/SOC2, COBIT, COSO, HIPPA, RBI, IRDAI, NIST, Data Localization, CISGRC tool implementationArticulation of BCP plan and strategyCrisis management planBCP/DR planning and implementationImplementation of BCMS standard (ISO 22301)Conducting actual and tabletop DR drillsFunctional recovery planGRC resource deployment onsite/offsiteSecurity services resource deployment onsite/offsite

    Contact Details:

    Name (required):

    Organization Name (required):

    Email (required):

    Contact No (required):

    Detail about the requirement (optional):