Adam Halsey, IT Manager at F3Group
“It was a pleasure to work with the F3Group. The main challenge was to produce a management system that clearly documented how the company complies to ISO 27001. The solution was to use the AvISO checklist and scenario analysis risk methodology, which ensured that all 114 clauses of the ISO 27001 Annex A controls list were addressed. This really helped to identify opportunities for improvement in all business areas and to develop an effective treatment plan.”
A Management System must be reflective of the business processes and not based on templates and generic documentation.
Read what other clients said about us for this standard