Policies that reflect how you work
Through conversations with the people responsible, we turn requirements into workable policies, procedures and registers. Review, approval and ownership are explicitly recorded.
Improve
We turn your roadmap into workable policies, clear responsibilities and demonstrable improvements. We tailor the approach and effort to your organisation, the results of your Cyberwise Baseline and what you need.
Result
A compliance programme helps you translate the agreed requirements into how you work every day. You get policies, procedures and registers that fit your organisation, with clear owners and evidence of implementation.
We build on your roadmap and existing documentation. Your management makes the decisions, employees apply the rules and your IT team or IT partner implements the technical measures. Cyberwise guides the process and verifies the agreed results.
On a small screen you can scroll the table horizontally.
| Area | Cyberwise | Your IT partner or IT team | You |
|---|---|---|---|
| Policies and procedures | Draft and have approved | Input on technical procedures | Approval |
| Building the ISMS | Set up and guide | Provide evidence | Owners and decisions |
| Awareness | Develop and roll out | – | Employee participation |
| Technical measures | Specify, guide, validate | Implement | Budget and priorities |
| Audit and conformity | Internal audit, preparation | Technical questions | Management review |
In concrete terms
Through conversations with the people responsible, we turn requirements into workable policies, procedures and registers. Review, approval and ownership are explicitly recorded.
Each work package has a goal, an owner, a review date and evidence criteria. We discuss progress, blockers and management decisions with your organisation and your IT partner.
We support the internal audit, the management review and the collection of evidence within the agreed assignment. For work we have produced ourselves, we bring in an independent reviewer.
For each work package, we agree the content and review rounds. Formal certification is carried out by an independent certification body.
Let’s discuss the requirements that apply to your organisation and the support you need. We agree the scope and roles with your management and IT partner.