{"id":616,"date":"2025-03-24T12:04:51","date_gmt":"2025-03-24T12:04:51","guid":{"rendered":"https:\/\/gcl-intl.com\/?post_type=gcl-services&#038;p=616"},"modified":"2025-08-18T11:20:19","modified_gmt":"2025-08-18T11:20:19","slug":"iso-27001-information-security","status":"publish","type":"gcl-services","link":"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/","title":{"rendered":"ISO 27001 Information Security"},"content":{"rendered":"<div class=\"section-title title-margin\">\n<h1>What is ISO 27001?<\/h1>\n<\/div>\n<p>ISO 27001 is a specification for the management of information security. It is applicable to all sectors of industry and not confined to information held on computers. Information may be printed or written on paper, stored electronically, transmitted by post or email, shown on films, or spoken in conversation.<\/p>\n<div style=\"padding-top: 10px; padding-bottom: 10px; text-align: center;\"><iframe title=\"YouTube video player\" src=\"https:\/\/www.youtube.com\/embed\/MaGQtbGAecc\" width=\"auto\" height=\"315\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/div>\n<div class=\"section-title title-margin\">\n<h3>What does information security cover?<\/h3>\n<\/div>\n<ul class=\"gcl-list\">\n<li>Confidentiality, ensuring that access to information is appropriately authorised<\/li>\n<li>Integrity, safeguarding the accuracy and completeness of information and processing methods<\/li>\n<li>Availability, ensuring that authorized users have access to information when they need it<\/li>\n<\/ul>\n<div class=\"section-title title-margin\">\n<h3>Why apply for ISO 27001 certification?<\/h3>\n<\/div>\n<p>The objective of ISO 27001 certification is to ensure that there are adequate confidentiality, integrity and availability controls in place to safeguard the information of interested parties. These include clients, employees, trading partners and consumers.<\/p>\n<p>Unprotected systems are vulnerable to an array of threats, including computer-assisted fraud, sabotage and viruses. Such threats can be internal or external, accidental or malicious. Breaches in information security can allow vital information to be accessed, stolen, corrupted or lost.<\/p>\n<p>Information is now globally accepted as being a vital asset for most organisations. Therefore the\u00a0confidentiality, integrity, and availability of corporate and customer information may be essential to\u00a0maintain competitive edge, cash-flow, profitability, legal compliance and commercial image.<\/p>\n<div class=\"section-title title-margin\">\n<h3>What are the benefits to your company of ISO 27001 certification?<\/h3>\n<\/div>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"size-medium aligncenter\" src=\"https:\/\/www.gcl.uk\/wp-content\/uploads\/2022\/12\/Process-ISO-27001.jpg\" alt=\"\" width=\"2255\" height=\"1211\" \/><\/p>\n<p>The ISO 27001 standard is intended to assist with these risks. It is easy to imagine the consequences\u00a0and damage to a brand or organisation if its information was lost, destroyed or corrupted.<\/p>\n<p>An information security management system compliant to ISO 27001 can help you demonstrate to clients and suppliers that you take information security seriously. You will gain a competitive advantage; an ever-growing number of companies require certification to\u00a0ISO 270001 as a prerequisite for doing business.<\/p>\n<p>You will be able to make a public statement of capability without revealing your security processes. By ensuring controls are in place, the risk of security threats is greatly reduced.<\/p>\n<p>Whatever the medium the information takes, or means by which it is shared or stored, the ISO 27001 standard assists in providing a system approach an organization ensure it is always appropriately protected.<\/p>\n<table class=\"gmp720\">\n<tbody>\n<tr>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Demonstration of credibility and trust<\/li>\n<\/ul>\n<\/td>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Proven business credentials<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Establishes that laws and regulations are being met<\/li>\n<\/ul>\n<\/td>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Openings in new markets<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Ensures commitment to on-going information security<\/li>\n<\/ul>\n<\/td>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Customer satisfaction<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Provides confidence to stakeholders, customer, trading partners, employees<\/li>\n<\/ul>\n<\/td>\n<td><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<div class=\"section-title title-margin\">\n<h3>Requirements of the ISO 27001 standard<\/h3>\n<\/div>\n<p>The main requirements of the standard can be categorised as follows:<\/p>\n<table class=\"gmp720\">\n<tbody>\n<tr>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Security policy<\/li>\n<\/ul>\n<\/td>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Communications and operations management<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Organizational security<\/li>\n<\/ul>\n<\/td>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Access control<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Asset classification and control<\/li>\n<\/ul>\n<\/td>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>System development and maintenance<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Personnel security<\/li>\n<\/ul>\n<\/td>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Business continuity management<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Physical and environmental security<\/li>\n<\/ul>\n<\/td>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Compliance with legislation<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<div class=\"section-title title-margin\">\n<h3>What is the certification process?<\/h3>\n<\/div>\n<p>The certification process is in three simple steps:<\/p>\n<p><strong>Application for certification<\/strong><\/p>\n<p>Complete the on line form for GCL INTL to send a quotation.<\/p>\n<p><strong>Initial Certification Audit<\/strong><\/p>\n<p>The assessment process is based on a 2 stage approach as follows:<\/p>\n<p><strong>Stage 1<\/strong> &#8211; a basic audit to check whether the organisation is in a state of readiness for the stage 2 audit\u00a0and involves the following:<\/p>\n<table class=\"gmp720\">\n<tbody>\n<tr>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Confirm that the documents conforms to the requirements of the ISO 27001<\/li>\n<\/ul>\n<\/td>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Production of a report that identifies any non-compliance or potential for non-compliance and<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Confirm the scope of certification including any justifiable not applicable.<\/li>\n<\/ul>\n<\/td>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Production of an assessment plan and confirm a date for the stage 2 assessment visit.<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Check legislative compliance<\/li>\n<\/ul>\n<\/td>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Agree a corrective action plan if required.<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>Stage 2<\/strong> &#8211; the purpose of this visit is to confirm that the information security management system fully conforms to the requirements of ISO 27001 in practice and involves the following:<\/p>\n<table class=\"gmp720\">\n<tbody>\n<tr>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Undertake sample audits of the processes and activities defined in the scope of assessment<\/li>\n<\/ul>\n<\/td>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Produce an audit programme and confirm a month and year for the first surveillance visit<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Document how the system complies with the standard<\/li>\n<\/ul>\n<\/td>\n<td class=\"w315\">\n<ul class=\"gcl-list\">\n<li>Report any non-conformity or observations<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>For more information about ISO 27001 please contact us by phone or <a href=\"mailto:sarah.dent@gcl-intl.com\" target=\"_blank\" rel=\"noopener\">email<\/a>.\u00a0We will be pleased to assist you.<\/p>","protected":false},"author":1,"featured_media":617,"menu_order":0,"template":"","meta":{"_acf_changed":false},"categories":[8],"tags":[],"class_list":["post-616","gcl-services","type-gcl-services","status-publish","has-post-thumbnail","hentry","category-management-system"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>ISO 27001 Information Security - GCL International Ltd<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ISO 27001 Information Security - GCL International Ltd\" \/>\n<meta property=\"og:description\" content=\"What is ISO 27001? ISO 27001 is a specification for the management of information security. It is applicable to all sectors of industry and not confined to information held on computers. Information may be printed or written on paper, stored electronically, transmitted by post or email, shown on films, or spoken in conversation. What does [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/\" \/>\n<meta property=\"og:site_name\" content=\"GCL International Ltd\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-18T11:20:19+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/gcl-intl.com\/wp-content\/uploads\/2025\/03\/ISO-27001-01.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1084\" \/>\n\t<meta property=\"og:image:height\" content=\"667\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Tempo di lettura stimato\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minuti\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/\",\"url\":\"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/\",\"name\":\"ISO 27001 Information Security - GCL International Ltd\",\"isPartOf\":{\"@id\":\"https:\/\/gcl-intl.com\/it\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/gcl-intl.com\/wp-content\/uploads\/2025\/03\/ISO-27001-01.png\",\"datePublished\":\"2025-03-24T12:04:51+00:00\",\"dateModified\":\"2025-08-18T11:20:19+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/#breadcrumb\"},\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/#primaryimage\",\"url\":\"https:\/\/gcl-intl.com\/wp-content\/uploads\/2025\/03\/ISO-27001-01.png\",\"contentUrl\":\"https:\/\/gcl-intl.com\/wp-content\/uploads\/2025\/03\/ISO-27001-01.png\",\"width\":1084,\"height\":667},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/gcl-intl.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ISO 27001 Information Security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/gcl-intl.com\/it\/#website\",\"url\":\"https:\/\/gcl-intl.com\/it\/\",\"name\":\"GCL International Ltd\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/gcl-intl.com\/it\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"ISO 27001 Information Security - GCL International Ltd","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/","og_locale":"it_IT","og_type":"article","og_title":"ISO 27001 Information Security - GCL International Ltd","og_description":"What is ISO 27001? ISO 27001 is a specification for the management of information security. It is applicable to all sectors of industry and not confined to information held on computers. Information may be printed or written on paper, stored electronically, transmitted by post or email, shown on films, or spoken in conversation. What does [&hellip;]","og_url":"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/","og_site_name":"GCL International Ltd","article_modified_time":"2025-08-18T11:20:19+00:00","og_image":[{"width":1084,"height":667,"url":"https:\/\/gcl-intl.com\/wp-content\/uploads\/2025\/03\/ISO-27001-01.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Tempo di lettura stimato":"3 minuti"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/","url":"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/","name":"ISO 27001 Information Security - GCL International Ltd","isPartOf":{"@id":"https:\/\/gcl-intl.com\/it\/#website"},"primaryImageOfPage":{"@id":"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/#primaryimage"},"image":{"@id":"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/#primaryimage"},"thumbnailUrl":"https:\/\/gcl-intl.com\/wp-content\/uploads\/2025\/03\/ISO-27001-01.png","datePublished":"2025-03-24T12:04:51+00:00","dateModified":"2025-08-18T11:20:19+00:00","breadcrumb":{"@id":"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/"]}]},{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/#primaryimage","url":"https:\/\/gcl-intl.com\/wp-content\/uploads\/2025\/03\/ISO-27001-01.png","contentUrl":"https:\/\/gcl-intl.com\/wp-content\/uploads\/2025\/03\/ISO-27001-01.png","width":1084,"height":667},{"@type":"BreadcrumbList","@id":"https:\/\/gcl-intl.com\/it\/certification\/iso-27001-information-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/gcl-intl.com\/"},{"@type":"ListItem","position":2,"name":"ISO 27001 Information Security"}]},{"@type":"WebSite","@id":"https:\/\/gcl-intl.com\/it\/#website","url":"https:\/\/gcl-intl.com\/it\/","name":"GCL International Ltd","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/gcl-intl.com\/it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"}]}},"_links":{"self":[{"href":"https:\/\/gcl-intl.com\/it\/wp-json\/wp\/v2\/gcl-services\/616","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gcl-intl.com\/it\/wp-json\/wp\/v2\/gcl-services"}],"about":[{"href":"https:\/\/gcl-intl.com\/it\/wp-json\/wp\/v2\/types\/gcl-services"}],"author":[{"embeddable":true,"href":"https:\/\/gcl-intl.com\/it\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/gcl-intl.com\/it\/wp-json\/wp\/v2\/media\/617"}],"wp:attachment":[{"href":"https:\/\/gcl-intl.com\/it\/wp-json\/wp\/v2\/media?parent=616"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gcl-intl.com\/it\/wp-json\/wp\/v2\/categories?post=616"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gcl-intl.com\/it\/wp-json\/wp\/v2\/tags?post=616"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}