Other Services
Call Us
ISO 27001:2022 Information Security Management
Dari gap analysis hingga audit sertifikasi, kami dampingi organisasi Anda membangun SMKI yang siap diaudit dan selaras dengan UU PDP.
ISO/IEC 27001:2022 adalah standar sistem manajemen keamanan informasi (SMKI/ISMS) yang diakui secara internasional. Madhava Technology mendampingi organisasi Anda dari gap analysis dan penyusunan dokumen hingga audit sertifikasi oleh lembaga sertifikasi terakreditasi. Kontrol yang dibangun juga dipetakan ke kewajiban UU No. 27 Tahun 2022 tentang Pelindungan Data Pribadi (UU PDP). Untuk sistem manajemen privasi yang formal, tersedia layanan ISO 27701.
Why is ISO 27001 Important?
Memenuhi persyaratan tender dan klien
Mengurangi risiko insiden keamanan
Mendukung kepatuhan regulasi
Meningkatkan kepercayaan pelanggan dan mitra
Menyiapkan audit dan keberlanjutan bisnis
Siapa saja yang perlu ISO 27001?
Organisasi harus menjamin keamanan data secara konsisten, khususnya di beberapa industri. Kebutuhan ISO/IEC 27001 didorong oleh regulasi sektor, persyaratan klien, atau tender.
- Electronic System Providers (PSE)
- Alternative Trading Systems (SPA)
- Pemerintahan (SPBE)
- Dukcapil Data Users
- Healthcare Sector
- Financial and Banking Sector
- Telekomunikasi dan teknologi
- Organisasi yang mengelola data pribadi
Consultation Phases
Pre - Consultation
Awareness Training
Document Preparation & Implementation
Internal Audit
Management Review
External Audit
(Frequently Ask Question)
Pada dasarnya sukarela. Namun sejumlah regulasi sektor mewajibkan pengamanan informasi yang memadai, dan banyak klien atau tender mensyaratkan sertifikasi sebagai bukti.
ISO 27001 is implemented by focusing on various aspects, including:
- Initial assessment of the existing system within the organization
- Ensuring management commitment
- Developing an implementation team for the Information Security Management System (ISMS) according to ISO 27001
- Defining the scope, policies, and objectives for information security
- Identifying risks and impacts
- Establishing solutions to protect and mitigate risks
- Developing and implementing controls based on Annex-A of ISO 27001
- Conducting awareness training
- Internal audits
- Management review for performance monitoring and measurement
- Certification audit by an external party
- Ongoing maintenance and improvement of ISMS in line with changes in the organization and business environment.
To obtain certification, an organization must demonstrate compliance with the standards.
- System Implementation: Integration of system documentation with ongoing business processes.
- Internal Audit: Identifying potential issues and weaknesses that may still be hidden.
- Management Review: Consideration of all relevant facts and making informed decisions.
- Corrective Actions: Addressing identified issues and documenting how they were resolved.
The implementation and maintenance of the ISMS according to ISO/IEC 27001 is a collaborative effort involving top management, service teams, process owners, internal auditors, quality teams, employees, and external certification bodies. Collaboration among these stakeholders is key to ensuring the effectiveness of the ISMS and compliance with the standard.
Madhava Technology provides guidance and full support to clients through a series of consultation processes until the organization successfully achieves certification.
Tergantung ruang lingkup dan kesiapan organisasi. Umumnya, durasi pendampingan 3-6 bulan. Biaya konsultasi disesuaikan kebutuhan, sedangkan biaya audit sertifikasi dibayarkan ke lembaga sertifikasi.
Tidak sepenuhnya. ISO 27001 memperkuat pengamanan data, tetapi UU PDP juga mengatur dasar pemrosesan, hak subjek data, dan pemberitahuan kegagalan pelindungan data.