Standards

---

Consult2Comply has adopted a standards approach to information and business protection. This ensures the controls and standards are able to be measured and the correct security/compliance posture can be maintained.

The Consult2Comply team are experts in standards and guidelines. We can demonstrate to our clients skill and expertise in the following internationally recognized standards and guidelines:

ISO 27001	Information Security Management System
ISO 20000	Information Technology - Service Management (underpinned by ITIL)
ISO 27799	Health Informatics - Security Management in Health using ISO 17799
ISO 19077	Software Asset Management
ISO 15489	Effective Records Management
ISO 21188	Public Key infrastructure for Financial Services
ISO 28000	Security in the Supply Chain
ISO 19011	Guidelines for Quality and/or Environmental Management system auditing
BS 7858	Security Screening of individuals employed in a security environment
BS 25999	Business Continuity Management
CobIT	Control Objectives for IT
NIST/FISMA	National Institute of Standards and Technology (NIST 800-53)
ISO 9000	Quality Management
ISO 14001	Environmental Management
ISO 18001	Health and Safety
BS 7799-3	Guideline for Information Security Risk Management

Consult2Comply's approach is to help organizations align their business processes to ensure compliance to internationally recognized standards and best practices. We also assist our clients to map and implement these infrastructures to their specific regulations required by law to ensure compliance. Being accredited auditors, implementers and trainers we are able to fully understand business requirements and assist where necessary.

From these standards Consult2Comply staff can align other regulatory needs (HIPAA, GLBA, SOX, FFIEC, EU Privacy Directive, etc) and best practices to ensure compliance is obtained across the organization.

Please contact us for more information on how Consult2Comply can help your organization.