If you are at the initial stages of planning your journey to ISO 27001 Certification, a Gap Analysis is an ideal place to start. Our Gap Analysis is a brilliant initial audit to assess your current situation in terms of ISO 27001 readiness and identify areas of non-conformance in relation to the current ISO 27001 standard. This can then form the basis of your roadmap to ISO 27001 conformance.

Key Differentiators:

• Completely bespoke programme and schedule of work through consultative scoping
• Thorough audit on-site with a comprehensive review of policies and procedures. CDS will then deliver a tailor-made action plan to outline your roadmap towards conformance, creating a bespoke report of work outlining our findings.
• Very quick turnaround, Get your report within 7 days of the site visit
• A low cost/ High impact first step toward ISO 27001 certification
• Minimal disruption to BAU

Once CDS have carried out a gap analysis and provided a report listing all recommendations with a priority rating against each one, you will have a clear roadmap to ISO 27001 certification. You can either implement these recommendations yourself or enlist our qualified practitioners to help implement and improve the areas of concern. Our qualified practitioners can take ownership of all or part of the ISO 27001 certification plan and make sure that this has been implemented across all relevant areas of the business.

Key Differentiators

• • All consultancy is carried out by our fully qualified practitioners and consultants with over 10 years of industry experience.
  • Through our transparent and consultative approach, we can mentor incumbent resource on areas of conformance as part of the service.
  • CDS can be involved as much or as little as your require, with the ability to take complete ownership of a project and see it through to completion.

There are a total of 114 controls across 14 different categories in ISO 27001. You do not necessarily have to implement them all as not all these controls are relevant to every organisation. However, those that are applicable, require regular internal auditing. Our qualified consultants can support you with these audits.  

Key Differentiators

• • All audit consultancy is carried out by our fully qualified consultants with over 10 years of industry experience.
  • Through our transparent and consultative approach, we can mentor incumbent resource on areas of conformance as part of the service.

Training is a large part of compliance. Creating an Information Security Management System (ISMS) alone will not equate to ISO 27001 certification. Organisations must then ensure that this Information Security Management System (ISMS) is embedded and followed throughout the entire organisation. Regular training is the best way to make this happen.

CDS provide on-site training solutions bespoke to your organisation. Rather than generic training sessions, we use your Information Security Management System (ISMS) to tailor our training sessions to your organisation.

Key Differentiators

• • Fully qualified and experienced trainers
  • Bespoke training solutions
  • Classroom based training
  • Tailored on-the-job training
  • Interactive training sessions

Getting your ISO 27001 certification is great, maintaining your ISMS is an on-going process. CDS can help you in every aspect of maintaining your certification, some of these aspects are:

• • Adhering to all the policies and procedures in the ISMS
  • Continually updating the policies and procedures in line with the changing requirements of your organisation
  • Performing internal audits

Key Differentiators

• • All consultancy is carried out by our fully qualified practitioners and consultants with over 10 years of industry experience.
  • Through our transparent and consultative approach, we can mentor incumbent resource on areas of conformance as part of the service.
  • CDS can be involved as much or as little as your require, with the ability to take complete ownership of a project and see it through to completion.

CDS offer bespoke fully managed on-going annual support services. This allows your organisation to work towards and maintain your ISO 27001 certification whilst controlling budgets and resources. Essentially, we become an extension of your in-house team or in some cases, we become your team.

As well as taking care of any remediation action necessary based on the findings of the gap analysis, CDS can undertake ad-hoc consulting briefs and take ownership of implementing and delivering individual projects. 

All bespoke support service agreements include access to a business hours helpdesk and a fully qualified on-site consultant. In order to provide costings for this service, CDS would agree with you how often you would like your on-site consultant to visit and how much remote support desk assistance you would require. Using this information, CDS can provide you with an annual cost for the service.

Key Differentiators

• • Tailored / bespoke contracts to meet your exact requirements
  • Low cost and effective data protection support partner
  • Full end to end support for achieving and maintaining ISO 27001 certification
  • Fully qualified professionals with considerable industry and legal experience
  • Remote and on-site support provided

CDS have partnered with KnowBe4, the world’s largest integrated platform for awareness training combined with simulated phishing attacks. Their training platform covers data protection and cyber security. This training platform gives you access to a library of 900+ training items comprising of interactive modules, videos, games, posters and newsletters.

You can also use this platform to send simulated phishing attacks to your employees. You can then monitor and report on the outcome of these simulated phishing attacks in order to assess which staff members require refresher training.

Key Differentiators

• • Engaging, Interactive Browser-based Training. The interactive training gives your users a fresh new learner experience that makes learning fun and engaging. With the optional gamification feature, users can compete against their peers on leaderboards and earn badges while learning how to keep your organisation safe from cyber-attacks.
  • Automated Security Awareness Program (ASAP). ASAP allows you to create a customised Security Awareness Program for your organisation to help you create and implement a fully mature training program in just a few minutes!
  • Phish Alert Button. KnowBe4’s Phish Alert add-in button gives your users a safe way to forward email threats to the security team for analysis, and deletes the email from the user’s inbox to prevent future exposure. All with just one click!