• Zgjidhje & Sherbime
• Konsultime
• Sistemi i Menaxhimit te Sigurise se Informacionit

Sistemi i Menaxhimit te Sigurise se Informacionit

Implementing information security management systems will ensure that information security risks are identified, assessed and properly dealt with before they interrupt business processes and/or damage the business.

S&T Business Consulting Services offer clients a wide range of consultancy services designed to manage information security risks. Moreover, S&T globally can mitigate those risks, keeping them at an acceptable level by recommending security measures, developing a concise security policy and implementing and maintaining them for you.

Only business reasons are good reasons for implementing an Information Security Management System. Once implemented, the ISMS system can be certified for compliance with the ISO/IEC 27001 international standard. This certification can be used as evidence that your organisation deals with information securely. In today's world of fast information exchange economies, an ISO 27001 certificate is a significant competitive advantage.

How does it work?

In step one, S&T consultants, together with the client, identify the client's business processes, analyze and evaluate them in order to find out which processes are most critical to the business.

The next step involves identifying all types of resources, commonly called information security assets, needed for normal functioning of the business processes, identifying their value in those processes, threats and vulnerabilities they are exposed to and potential impact on the business if an incident occurs.

Business Impact Analysis results provide valuable input while creating a business continuity plan and disaster recovery plan for the client’s organization. The risk-based approach to information security that S&T uses is compatible with most popular information security standards and practices, including:

• ISO 27001
• ISO 17799
• BS-7799-3
• CobiT