Information Security ISO/IEC 27001

BSI Route to Registration

There are six steps to achieving registration to ISO/ IEC 27001:2005 with BSI.

Step 1 - Establish a management framework as identified in ISO/ IEC 27001:2005.

Step 2 - BSI will then provide an estimate of costs and timescales for formal assessment.

Step 3 - Submit a formal application to BSI.

Step 4 - BSI will undertake a desk top review of the Risk Assessment, Policy, Scope, Statement of Applicability and Procedures. This will then identify any weaknesses and omissions in your management system that need to be resolved.

Step 5 - BSI will then conduct an on-site assessment and make recommendations.

Step 6 - On successful completion of the audit, a certificate of registration is issued which clearly identifies the scope of the Information Security Management System. This certificate remains valid for 3 years and is supported by routine assessment visits throughout.

To find out more about registration and training services, please complete our Enquiry form.