ISO 27002 Information Security Management System

Background

Client is a Fortune 100 insurance firm with data center/technology operations located in Southern California and the midwest. Client is known as an industry leader in several major business verticals including life insurance, annuities, and asset management.

HotSkills security resources worked with this client to plan and build a standards based Information Security Management System (ISMS) to manage their Information Security Program.

The Engagement

Client needed to better define their information security program to increase efficiency, effectiveness, comprehensiveness, and defensibility. Our consultants worked with Client management to build a comprehensive strategic view and then follow through with a structured and defensible methodical approach to translate the strategy into defensible tactics.. This provided management with a basis to define measurable requirements and metrics utilizable for program improvement.

The Approach

HotSkills consultants worked with Client management to define an appropriate information security management framework. This framework then served as the basis to identify and codify information security processes and requirements. This produced an enterprise information security baseline that addressed information in any form.

HotSkills consultants then worked along side Client operational staff to implement and refine the enterprise information security baseline requirements within their specific environments. As the ISMS reached operational maturity, gaps in implementation, with corresponding risk, provided a risk based view for informed choice decision making.

The Result

The resultant ISMS provided a comprehensive, defensible and extensible Information Security Program, that is certifiable to the ISO27001 Information Security Management standard. Legal, Regulatory, and Compliance information security issues have been successfully integrated into the Information Security Program, for an improvement in both process efficiency and program effectiveness through integration of effort. Participants at all levels within the program clearly understand both their responsibilities, and their corresponding program support.

info@hotskills-inc.com (800) 507-4517		© Hotskills 2005-2008 All Rights Reserved. Privacy Policy				4801 Nicollet Ave S, Suite A Minneapolis, MN 55419
Site Map		Services	Industries	About Us		Contact