ISO

We have been implementing Information Security Management Systems (ISMS) since 1995. Develop Capability has the expertise to complete your Security Risk Assessment and process documentation in a practical and cost-effective way.  

We can determine and deliver a balanced ISMS, where the mandatory requirements of the ISO 27001 Standard are being met whilst ensuring that the ISMS is tailored to meet business objectives while taking in to  account your organisation’s specific risks, size and culture. 

This allows you to continue to focus on your main business operations knowing that the ISMS will satisfy statutory, regulatory and contractual requirements while also enhancing your reputation and customer satisfaction. 

Achieving this balance is by virtue of our experience in ISO 27001 certification. Our MD, Bal Matu,  has been a Registered ISO 27001 Lead Auditor and an ISO 27001 Consultant since the initial launch of the BS7799 Code of Practice (the predecessor to ISO 27001) in 1995. As a Management Consultant since 1992, he has a wealth of real-world experience and understanding of the challenges, both technical and cultural, of achieving cost-effective certification. 

Develop Capability has a 100% certification record where all of our customers have achieved certification at their first attempt. 

Our ISO 27001 consultancy service can be tailored to provide the guidance and knowledge transfer across you need such as assisting with risk assessments, policies and procedures, security awareness training and compliance with legislative and regulatory requirements, including Data Protection and GDPR. We can tailor our consultancy service to meet your specific requirements taking account of  factors such as the availability of internal resources, as well as timescales and budgets. 

We can also provide interim information security managers and internal audit resources to provide cover for absence or managing a specific project (e.g. implementing a management system or responding to a tender/bid). 

There are many benefits associated with an ISO 27001 compliant ISMS including:- 

• Fulfils this core compliance requirement when bidding for contracts.  
• Demonstrates an understanding and management of information security risks and their treatment. 
• Provides for effective handling and learning from security incidents. 
• Assures trained and security–aware staff. 
• Provides framework for demonstrating statutory, regulatory and contractual compliance. 

• Enables security of communications and data handling. 

Our MD, Bal Matu,  has been a Registered ISO 20000 Lead Auditor and an ISO 20000 Consultant since the initial launch of certification against the BS1500 Code of Practice (the predecessor to ISO 20000-1) in 2003. 

The better and more effective your organisation is in designing, planning and delivering services, then the knock-on effect is that your customers (internal or external) are going to be better at their jobs as well. Develop Capability can help you to implement an ITIL-based ISO 20000 compliant IT Service Management System (SMS) which ensures that you have good understanding of your customers’  requirements and a strong focus on delivering the services that will meet your customer needs. By adopting an ITIL-based structured approach to service design, delivery and support you are assured of reliable services capable of withstanding disruption. This not only improves your business performance it also enhances your reputation and customer satisfaction. 

ISO 20000-1 compliant systems are based on the ITIL framework for Service Management. The framework covers all elements of service design, transition and delivery.  

There are many benefits associated with an ISO 20000 compliant SMS including:- 

Establishes robust and effective controls for the planning, design, transition, delivery and improvement of services. 

• Demonstrates alignment with best practice industry standards (ITIL). 

• Demonstrates management of risks and achievement of SLA’s. 
• Provides a continual improvement framework. 

Understanding and reducing the impact of business disruption can make or break your organisation. Your ability to recover, resume operations, and eventually return to normal is not only comforting for customers but vital to the survival of your business. Develop Capability can help you develop and implement a business continuity plan that will deliver a quick and smooth restoration of your operations in the event of any adverse incident. We can also help you achieve compliance with the ISO 22301 standard, which takes this one stage further providing a fully certified management system for business continuity. 

Develop Capability consultants will review your existing plans and business continuity processes against the requirements of the ISO 22301 Standard. We will then work with you to develop a plan to implement a Business Continuity Management System (BCMS) that meets the requirements of ISO 22301.  

There are many benefits associated with an ISO 22301 compliant BCMS including:- 

• Evaluates the risks and minimises the impact of disruptive incidents. 
• Proactively identify and plan resources required to support the business continuity strategy (e.g. people, information and data, buildings, work environment and associated utilities, facilities, equipment and consumables, ICT systems, transportation, finance, and partners and suppliers). 

• Builds stakeholder confidence of governance controls and best practice processes. 
• Provides confidence in ability to fulfil contractual obligations during disruptive incidents.