-
Global cyber hack – A growing concern for Information Security
16th May, 2017 | by PwC Digital TrustYou are likely to have seen or read the widely reported press that there has been a significant wave of ransomware affected a large number of global health bodies and their access to data held on computer systems.
-
ISO 27001 – Why is it important?
27th January, 2017 | by Tom BarhamHere at PwC’s Auditor Training we have recently released our latest auditor training course, and it’s all about ISO 27001 Information Security, the Internationally recognised information security standard.
We asked Ryan Ettridge, PwC Partner in Digital Trust and Risk Assurance, to explain why ISO 27001 and Information Security is so important, particularly in today’s security conscious business environment. -
Are Your Information Assets Secure?
20th December, 2016 | by Jay GreensillPwC’s Auditor Training & Certification business recently held an information session for clients and staff on the benefits of their ISO 27001:2013 training course, which teaches auditors the key processes and approaches a business needs to manage information security risks.
-
What is ISO 27001?
15th December, 2016 | by Tom BarhamISO 27001 helps organisations to keep secure both their information assets and those of their customers.
Organisations of all types and sizes collect, process, store and transmit information in many forms. This information is valuable to an organisation’s business and operations. -
ISO 27001 – Information Security is not all Information Technology. So what else is it?
16th November, 2016 | by Andrew BarhamThere is increasing focus and interest in information security. Just think of recent events here in Australia… the census crashing because of overseas hackers; the almost continual reporting of people’s private information being compromised; phone hacking by unscrupulous news reporters desperate for the latest big story; and of course, people posting information they shouldn’t on social media.
Whilst all these major stories are centred around the failure of some aspect of information technology, ISO 27001 (the International Standard for information security management systems) does include many requirements for non-IT security of information… and that is what we are going to talk about here.
What can you do to keep your information secure that does not involve the IT department? We’ve picked nine specific ISO 27001- Information Security controls which are listed specifically in Annex A and have been directly derived from, and align with, ISO 27002. We also briefly explain what each means.
