[et_pb_section fb_built=“1″ _builder_version=“4.0.4″ background_image=“http:\/\/www.forensee.cz\/wp-content\/uploads\/2020\/03\/dreamstime_xxl_154771088-2-Cropped.jpg“ height=“500px“ animation_style=“fade“][et_pb_row _builder_version=“4.0.4″ custom_margin=“32px||||false|false“][et_pb_column type=“4_4″ _builder_version=“4.0.4″][et_pb_text _builder_version=“4.0.4″ text_text_color=“#ffffff“ header_text_color=“#ffffff“ header_font_size=“50px“ header_2_text_color=“#ffffff“ text_orientation=“center“ header_font_tablet=““ header_font_phone=““ header_font_last_edited=“on|desktop“ header_font_size_tablet=“45px“ header_font_size_phone=“40px“ header_font_size_last_edited=“on|phone“ header_line_height_tablet=“1.3em“ header_line_height_phone=“1.3em“ header_line_height_last_edited=“on|tablet“ header_2_font_tablet=““ header_2_font_phone=““ header_2_font_last_edited=“on|phone“ header_2_font_size_tablet=“22px“ header_2_font_size_phone=“20px“ header_2_font_size_last_edited=“on|phone“ header_2_line_height_tablet=“1.3em“ header_2_line_height_phone=“1.3em“ header_2_line_height_last_edited=“on|tablet“ header_text_shadow_style=“preset5″ header_text_shadow_horizontal_length=“0.04em“ header_text_shadow_vertical_length=“0.06em“ header_2_text_shadow_style=“preset5″]<\/p>\n
<\/p>\n
<\/p>\n
[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=“1″ _builder_version=“4.0.4″ custom_margin=“||-25px||false|false“][et_pb_row column_structure=“1_3,1_3,1_3″ _builder_version=“4.0.4″ animation_style=“fade“][et_pb_column type=“1_3″ _builder_version=“4.0.4″ custom_padding=“0px||||false|false“][et_pb_testimonial quote_icon_color=“#ff9500″ _builder_version=“4.0.4″ body_font=“|600|||||||“ body_text_color=“#000000″ body_font_size=“18px“ background_color=“rgba(0,0,0,0.04)“ box_shadow_style=“preset1″]Jsme si v\u011bdomi hodnoty informac\u00ed a chceme pomoci s \u00fa\u010dinn\u00fdm \u0159\u00edzen\u00edm jejich bezpe\u010dnosti.[\/et_pb_testimonial][\/et_pb_column][et_pb_column type=“1_3″ _builder_version=“4.0.4″][et_pb_testimonial quote_icon_color=“#ff9500″ _builder_version=“4.0.4″ body_font=“|600|||||||“ body_text_color=“#000000″ body_font_size=“18px“ background_color=“rgba(0,0,0,0.04)“ box_shadow_style=“preset1″]Pot\u0159ebujeme pomoct s implementac\u00ed syst\u00e9mu \u0159\u00edzen\u00ed bezpe\u010dnosti informac\u00ed dle ISO\/IEC 27 001 a s p\u0159\u00edpravou na certifikaci dle t\u00e9to normy.[\/et_pb_testimonial][\/et_pb_column][et_pb_column type=“1_3″ _builder_version=“4.0.4″][et_pb_testimonial quote_icon_color=“#ff9500″ _builder_version=“4.0.4″ body_font=“|600|||||||“ body_text_color=“#000000″ body_font_size=“18px“ background_color=“rgba(0,0,0,0.04)“ box_shadow_style=“preset1″]Nem\u00e1me vhodn\u00e9ho pracovn\u00edka pro roli intern\u00edho auditora dle ISO\/IEC 27 001 nebo se n\u00e1m nevyplat\u00ed na tuto \u010dinnost n\u011bkoho zam\u011bstnat.[\/et_pb_testimonial][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=“1″ _builder_version=“4.9.2″ background_color=“rgba(0,0,0,0.07)“ custom_margin=“0px||||false|false“ custom_padding=“0px||0px||false|false“ hover_enabled=“0″ border_color_top=“#ff9500″ border_color_bottom=“#ff9500″ sticky_enabled=“0″][et_pb_row _builder_version=“4.9.2″ custom_padding=“||24px|||“ hover_enabled=“0″ sticky_enabled=“0″][et_pb_column type=“4_4″ _builder_version=“4.0.4″][et_pb_text _builder_version=“4.9.2″ text_text_color=“#000000″ text_font_size=“16px“ header_text_color=“#000000″ header_2_font=“||||||||“ header_2_text_color=“#000000″ header_2_font_size=“35px“ header_2_line_height=“1.3em“ hover_enabled=“0″ header_text_align=“justify“ sticky_enabled=“0″ text_orientation=“justified“]<\/p>\n
The documented ISMS (Information Security Management System), or information security management system, is a system that protects selected information assets through the analysis of possible risks and the subsequent implementation of measures that are continuously monitored. It may sound complicated, but this system is suitable for all organizations that work with information systems or information in general in any way. So for everyone. This means that ISMS can be used for both a company with a few employees and a multinational company. Large companies now have this system in place, while small ones often do not place enough emphasis on information security, and they begin to address security only when it is compromised. At the same time, information is often the most valuable asset of a company.<\/p>\n
What if I don't want a certificate<\/strong><\/span><\/p>\n There are a number of reasons to complete the process of ISMS implementation in the company in the form of certification - prestige, partner requirements or company policy. However, certification is by no means mandatory. For many companies, the essence of ISMS is important - the awareness that they have assets of a certain value and care about their security. And they do not require confirmation of this fact with a certificate. In many cases, even the information security management system can become more natural and is better and faster adopted in the organization. We are ready to cooperate with you on any project, whether its goal is to obtain certification according to ISO\/IEC 27 001 or \"just\" the implementation of basic rules and procedures of information security.<\/p>\n <\/strong><\/span><\/p>\n Implementation of the ISMS system according to ISO \/ IEC 27 001 with subsequent certification<\/strong><\/span><\/p>\n If you decide to implement an information security management system in order to obtain certification according to ISO \/ IEC 27 001, we are ready to help you in all phases of implementation and certification. The initial step is a short comparative analysis, then we determine the current readiness of the organization and estimate the complexity of the entire project in your specific case accordingly.<\/p>\n The first phase of the process then consists in mapping the organization's processes. This step is necessary so that we can jointly determine in which parts of the organization the ISMS system will be implemented and certified. In addition, the output from this section is universally applicable for further management of the organization. Very often, they reveal weaknesses in management, which the management of the organization - regardless of the ISMS system - can focus on.<\/p>\n In the second step, the information assets of the organization are mapped. Based on the knowledge of processes and assets, a risk analysis can then be developed. This then serves as an input for a development of certain measures that will minimize those risks.<\/p>\n We will help you prepare all the documentation - both the mandatory one, which is required for successful certification, and the optional one, which will help you apply the principles of ISMS in the practical life of the organization. It is a matter of course to provide training for employees if it proves to be necessary.<\/p>\n In the last phase, we will help you prepare before and also during the certification itself. After successfully obtaining the certificate according to ISO \/ IEC 27 001, we are ready to help you meet the requirements of continuous improvement, non-compliance management and implementation of corrective measures.<\/p>\n These positions are key and mandatory for a certified information security management system according to ISO \/ IEC 27 001. Our experts have the appropriate qualifications and are constantly educating themselves in the field. We will be happy to offer you their skills and experience for outsourcing these key roles.<\/p>\n Performing a prescribed internal audit by an external auditor brings a number of benefits to the organization. The most important of these is to gain an objective view of the state of the ISMS system in the organization. This is important for the correct and timely adoption of corrective measures to identified nonconformities and to maintain the condition of continuous improvement for the non-certification audit. Secondly, there are cost savings, because only in the largest organizations is it worth to fill the position of ISMS auditor with a regular employee and ensure his continuous training in ISMS problematics.<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=“1″ _builder_version=“4.0.4″ custom_padding=“||||false|false“][et_pb_row _builder_version=“4.0.4″ max_width=“250px“ module_alignment=“center“ custom_margin=“||-40px||false|false“ custom_padding=“0px||0px||false|false“][et_pb_column type=“4_4″ _builder_version=“4.0.4″][et_pb_text _builder_version=“4.0.4″ text_text_color=“#ffffff“ header_text_color=“#ffffff“ header_4_text_color=“#ffffff“ header_4_font_size=“36px“ background_color=“#ff9500″ width=“100%“ max_height=“1000px“ custom_margin=“-65px||15px|400px|false|false“ custom_margin_tablet=“|||240px|false|false“ custom_margin_phone=“|||100px|false|false“ custom_margin_last_edited=“on|phone“ custom_padding=“20px|15px|20px|15px|false|false“ animation_style=“fade“ border_color_all=“#ff9500″]<\/p>\n Most of the most effective measures to increase information security are of a procedural nature and do not require the purchase of expensive software solutions?<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=“1″ _builder_version=“4.0.4″ custom_margin=“-28px||||false|false“][et_pb_row _builder_version=“4.0.4″ custom_margin=“0px||||false|false“ custom_padding=“0px||0px||false|false“][et_pb_column type=“4_4″ _builder_version=“4.0.4″][et_pb_text _builder_version=“4.0.4″ text_text_color=“#000000″ text_font_size=“16px“ header_text_color=“#000000″ header_2_text_color=“#000000″ header_2_font_size=“35px“ header_2_line_height=“1.3em“ custom_margin=“-120px||||false|false“ custom_margin_tablet=“-40px||||false|false“ custom_margin_phone=“-10px||||false|false“ custom_margin_last_edited=“on|desktop“ header_2_font_tablet=““ header_2_font_phone=““ header_2_font_last_edited=“on|phone“]<\/p>\n <\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=“1_4,1_4,1_4,1_4″ _builder_version=“4.0.4″ animation_style=“fade“][et_pb_column type=“1_4″ _builder_version=“4.0.4″][et_pb_blurb title=“Stanoven\u00ed rozsahu a politky“ _builder_version=“4.0.4″ custom_padding=“10px|10px|10px|10px|false|false“ border_radii=“on|2px|2px|2px|2px“ border_width_all=“2px“ border_color_all=“#d6d6d6″ box_shadow_style=“preset1″]<\/p>\n In the first steps, it is necessary to determine the area of the organization to which the ISMS will apply, only the most needed areas can be selected and thus avoid parts of the organization where it is not necessary. This is followed by the definition of a policy, which is a mandatory document and includes objectives, strategy and various types of requirements in the field of ISMS.\u00a0<\/p>\n [\/et_pb_blurb][\/et_pb_column][et_pb_column type=“1_4″ _builder_version=“4.0.4″][et_pb_blurb title=“Vstupn\u00ed anal\u00fdza a anal\u00fdza rizik“ _builder_version=“4.0.4″ custom_padding=“10px|10px|10px|10px|false|false“ border_radii=“on|2px|2px|2px|2px“ border_width_all=“2px“ border_color_all=“#d6d6d6″ box_shadow_style=“preset1″]<\/p>\n From the initial input analysis it is possible to deduce the current state of information security in the organization, and thus compile\u00a0a proposal of measures to achieve the necessary goals for the implementation of ISMS. Risk analysis is a necessary part of the proposed measures, thanks to which risks can subsequently be minimized.\u00a0<\/span><\/p>\n [\/et_pb_blurb][\/et_pb_column][et_pb_column type=“1_4″ _builder_version=“4.0.4″][et_pb_blurb title=“N\u00e1vrh postup\u016f a jejich implementace“ _builder_version=“4.0.4″ custom_padding=“10px|10px|10px|10px|false|false“ border_radii=“on|2px|2px|2px|2px“ border_width_all=“2px“ border_color_all=“#d6d6d6″ box_shadow_style=“preset1″]<\/p>\n Dal\u0161\u00edm z nezbytn\u00fdch krok\u016f implementace je vypracov\u00e1n\u00ed povinn\u00fdch dokument\u016f jako jsou normy, manu\u00e1ly, sm\u011brnice, nebo prohl\u00e1\u0161en\u00ed o aplikovatelnosti. Tyto dokumenty slou\u017e\u00ed pro zaveden\u00ed normy do praxe a jsou doprov\u00e1zeny dal\u0161\u00edmi d\u016fle\u017eit\u00fdmi \u00fakony, jako je nap\u0159\u00edklad \u0161kolen\u00ed zam\u011bstnanc\u016f.\u00a0<\/p>\n [\/et_pb_blurb][\/et_pb_column][et_pb_column type=“1_4″ _builder_version=“4.0.4″][et_pb_blurb title=“Monitorov\u00e1n\u00ed a zlep\u0161ov\u00e1n\u00ed“ _builder_version=“4.0.4″ custom_padding=“10px|10px|10px|10px|false|false“ border_radii=“on|2px|2px|2px|2px“ border_width_all=“2px“ border_color_all=“#d6d6d6″ box_shadow_style=“preset1″]<\/p>\n Dle normy je nezbytn\u00e9 monitorovat v\u00fdkonnost bezpe\u010dnosti informac\u00ed a efektivnost cel\u00e9ho syst\u00e9mu. D\u016fle\u017eit\u00fdm bodem je i normativn\u00ed po\u017eadavek o neust\u00e1l\u00e9m zlep\u0161ov\u00e1n\u00ed, dle kter\u00e9ho organizace mus\u00ed reagovat na neshody syst\u00e9mu a p\u0159ijmout nov\u00e1 n\u00e1pravn\u00e1 opat\u0159en\u00ed, aby syst\u00e9m byl neust\u00e1le efektivn\u00ed.\u00a0<\/p>\n [\/et_pb_blurb][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=“1″ _builder_version=“4.0.4″ background_color=“rgba(0,0,0,0.07)“ custom_margin=“0px||||false|false“ custom_padding=“0px||0px||false|false“ border_color_top=“#ff9500″ border_color_bottom=“#ff9500″][et_pb_row _builder_version=“4.0.4″ custom_padding=“||24px|||“][et_pb_column type=“4_4″ _builder_version=“4.0.4″][et_pb_text _builder_version=“4.9.2″ text_text_color=“#000000″ text_font_size=“16px“ header_text_color=“#000000″ header_2_text_color=“#000000″ header_2_font_size=“35px“ header_2_line_height=“1.3em“ hover_enabled=“0″ text_orientation=“justified“ sticky_enabled=“0″]<\/p>\n Act No. 181\/2017 Coll., On Cyber Security, as amended, aims to improve cooperation between the private and public sectors in the field of cyber security. Its implementing regulations define a number of entities to which this Act imposes obligations that largely comply with the requirements of the ISO \/ IEC 27 001 standard, on which this regulation is based.<\/p>\n We are ready to provide cooperation and support to the entities affected by the Cyber Security Act in the implementation of the necessary measures, the creation of related documentation and the filling of the roles required by law in the cyber security system.<\/p>\n In particular, outsourcing the role of the Cyber Security Auditor brings the organization the advantage of cost savings, when this role does not have to be filled by a regular employee, at the same time the organization gains independent insight into its cyber security management system.<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=“1″ _builder_version=“4.0.4″ background_color=“#ff9500″ custom_margin=“50px||0px||false|false“ animation_style=“fade“][et_pb_row column_structure=“1_3,2_3″ _builder_version=“4.0.4″ custom_margin=“||0px||false|false“ custom_padding=“0px||0px||false|false“][et_pb_column type=“1_3″ _builder_version=“4.0.4″][et_pb_image src=“http:\/\/www.forensee.cz\/wp-content\/uploads\/2020\/05\/tech-19.jpg“ align=“center“ _builder_version=“4.0.4″][\/et_pb_image][\/et_pb_column][et_pb_column type=“2_3″ _builder_version=“4.0.4″][et_pb_text _builder_version=“4.9.2″ text_text_color=“#ffffff“ text_font_size=“16px“ header_2_text_color=“#ffffff“ header_2_font_size=“35px“ header_2_line_height=“1.5em“ custom_margin=“0px||||false|false“ custom_padding=“0px||0px||false|false“ hover_enabled=“0″ text_orientation=“justified“ sticky_enabled=“0″]<\/p>\n Client:<\/strong>\u00a0Energetics supplier<\/p>\n Problem:<\/strong>\u00a0The company's rapid growth has significantly increased the value of information assets and outgrown the capabilities of internal IT management<\/p>\n Our solution:<\/strong><\/p>\n A former client, for whom we dealt with secure data disposal in the past, turned to us for a consultation in the field of information systems security. Right after the introductory meeting, it was clear that the rapid growth of the family business now being a key player in the market was not followed by corresponding changes in the way IT was managed in general, information security was not addressed at all.<\/p>\n In the first phase, we performed an input analysis for the client to give the company's management a better idea of the current state of the organization. Subsequently, the scope of the project and the implementation period in the horizon of 10 months was proposed and approved. Due to the fact that the client is not heading for certification according to ISO \/ IEC 27 001, this time is sufficient.<\/p>\n The project was started by mapping the processes of the organization and its assets. The subsequent risk analysis was concluded with a proposal of measures that responded to the identified risks. Although it was not a preparation for certification, the basic documentation for the ISMS and related implementation documents were prepared in agreement with the client.<\/p>\n In the organization, after the end of the project, we perform regular annual audits of the ISMS system and we also provide ongoing training for key employees.<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=“1″ _builder_version=“4.0.4″ animation_style=“fade“][et_pb_row column_structure=“1_2,1_2″ _builder_version=“4.0.4″][et_pb_column type=“1_2″ _builder_version=“4.0.4″][et_pb_image src=“http:\/\/www.forensee.cz\/wp-content\/uploads\/2020\/05\/DSC06489-2-1.jpg“ _builder_version=“4.0.4″ max_height=“460px“][\/et_pb_image][\/et_pb_column][et_pb_column type=“1_2″ _builder_version=“4.0.4″][et_pb_team_member name=“Mari\u00e1n Svetl\u00edk“ position=“Vedouc\u00ed konzultant“ _builder_version=“4.0.4″ header_font=“|600|||||||“ header_text_color=“#000000″ header_font_size=“25px“ position_text_color=“#000000″ custom_margin=“0px||||false|false“ custom_padding=“100px||0px||false|false“][\/et_pb_team_member][et_pb_text _builder_version=“4.0.4″ header_2_font_size=“20px“]<\/p>\n [\/et_pb_text][et_pb_blurb use_icon=“on“ font_icon=“%%238%%“ icon_color=“#ff9500″ icon_placement=“left“ _builder_version=“4.0.4″ body_text_color=“#ff9500″ body_font_size=“20px“ body_link_text_color=“#ff9500″]<\/p>\n
ISMS internal auditor and ISMS manager<\/strong><\/span><\/p>\nDid you know that...<\/strong><\/h4>\n
We offer consulting<\/h2>\n
in all phases of implementation<\/h2>\n
Cyber Security Law<\/h2>\n
Case Study<\/strong><\/h2>\n
Do you need a consultation in the field of information security management?<\/h2>\n