Information security risk assessment
Prepare or review information security risk assessment, agree the responsible owner and organize evidence that shows the process is being used.
ISO/IEC 27001 — Information security management
Information risks, security control ownership and evidence for an ISMS.
Operating context
Scope around your business.
Rektrs supports information security management through a scoped assessment of your operations, existing records and process responsibilities. The engagement translates the agreed standard into practical documentation, working routines and review evidence.
The applicable edition, exclusions where permitted, locations, sector obligations and assessment route are confirmed at scoping. The roadmap is based on actual gaps and evidence; documentation alone does not demonstrate effective implementation.
Intended outcome
An evidence-based preparation plan with responsibilities and assessment dependencies made clear.
Control applicability and responsibility records
Prepare or review control applicability and responsibility records, agree the responsible owner and organize evidence that shows the process is being used.
Security operating evidence and reviews
Prepare or review security operating evidence and reviews, agree the responsible owner and organize evidence that shows the process is being used.
Engagement priorities
- Agreed scope and readiness roadmap
- Controlled documentation and operating evidence
- Prioritized corrective actions and review inputs
Plan your engagement
ISO 27001 information security management implementation
Rektrs supports ISO 27001 readiness through gap assessment, documented responsibilities, implementation and internal review. The scope addresses risk assessment, control selection, access management and security evidence.
Who issues the certificate or accreditation?
Rektrs provides consultancy and readiness support. A separate competent assessment body evaluates conformity and decides the outcome. ISO 17025 concerns laboratory accreditation; ISO 31000 is guidance, not a certifiable management-system standard.
Before implementation
Agree the work. Define the evidence.
We confirm your current systems, locations, process owners and required outputs. The proposal sets milestones, dependencies, acceptance criteria and support responsibilities for the agreed scope.
Certification, if sought, is assessed and decided by an independent certification body. REKTRS provides consultancy and preparation; ISO itself does not certify organizations.
Official ISO standard overview