Discover
Understand business context, interested parties, scope and objectives.
ISO 27001 Certification Journey
Practical, risk-based information-security consulting designed around your organization.
Your ISO 27001 journey, step by step.
JULA can support the organization from initial readiness through implementation and preparation for certification. The certification decision itself remains with an independent certification body.
Gap Assessment
Compare current practices and documentation with ISO/IEC 27001 requirements.
Risk Assessment
Identify, analyze and prioritize information-security risks.
ISMS Design
Develop governance, policies, procedures, objectives and the risk-treatment approach.
Implementation
Put controls into operation and establish responsibilities and evidence.
Awareness
Train employees and embed security responsibilities into everyday work.
Internal Audit
Test implementation and identify corrective actions before external certification.
Management Review
Give leadership visibility of performance, risks, actions and improvement.
Certification Readiness
Prepare evidence, teams and processes for the independent certification audit.
Continual Improvement
Maintain, monitor and improve the ISMS after implementation.