20000 Annual Maintenance
Once ISO Standard is implemented, the organization will be required to undergo periodic maintenance and Audits to ensure that the system is being maintained on real time basis to ensure the upkeep of effective compliances.
What Happens If ISO 20000 Maintenance Stops?
- ❌ No ITSM Service Reports
- ❌ No ISO 20000 Compliance
- ❌ No Service Desk Training
- ❌ No Risk Assessment
- ❌ No Vulnerability Mgmt
- ❌ No Regular Penetration Tests
- ❌ No Incident Resolution Logs
- ❌ No Regular Audits
Consequences of Audit Non-Compliance
- ⚠️ Service Delivery Failures & SLA Breach Penalties
- ⚠️ Breakdown of IT Service Quality & Process Governance
- ⚠️ Audit Non-Conformities in ISO 20000 Surveillance Audits
ISO 20000 Maintenance Service Deliverables
Keeping the site ready for Security Audits based on ISO 20000 Standards at real time basis
Conducting Internal security audits, including surprise audits and scheduled audits.
Conducting Periodic ISMS & Management Review Meetings as per the periodicity
Monthly ISMS Dashboard Compilation as per ISO 20000 Standard requirements
Monitoring of ISO 20000 compliance and Legal Requirements for all the processes.
Monitoring Risk Management Process to mitigate the risks with appropriate treatment of risk
Monitoring ISMS Objectives of the organization and Highlighting the issues which effect the achievement of objectives.
Conducting VA-PT for 5 IPs every Quarter & 1 Web Application (20 pages) annually.
Monitoring the vulnerability reporting and patching mechanism and suggesting the appropriate mitigation action.
Training the Trainers every Six months or on any new changes in the policies and providing certification to 1000 employees.
Monitoring Information security Incident Management Process to monitor and verifying efficacy of root cause analysis of the security Incidents.
Keeping all required controls, reports and matrices of all the related departments ready as per ISO 20000 standard.
Monitoring the BCP Tests & Fire Drills conducted as per the periodicity by the client's respective teams.
Suggesting the improvements to security posture of the organization to the Management on regular basis.
Closing the audit observations along with corrective and preventive actions.
Interacting with CB's & Clients for all upcoming audits and closing the audit findings
Helping in filling up RFPs of various clients and attending client meetings / conferences.
ISO 20000 Annual Maintenance Schedule
| Periodicity | Resource & Delivery Plan |
|---|---|
| Daily Compliance Adherence | Offsite daily Monitoring by Jinnicore Team for daily compliances via mail alerts |
| Weekly Compliance Check | Offsite Monitoring & Review by one Sr. Resource for all Departmental Compliances |
| Monthly Compliance Dashboard | Onsite Presence of Jinnicore Security Manager once a month. |
| Quarterly VAPT / WAPT | Onsite presence of Senior Resource to conduct VAPT |
| Half Yearly Audits | Onsite Presence of Senior Resource for Half Yearly Audits |
| Yearly BCP Drills | Yearly BCP Tests |
Benefits of Outsourcing ISO 20000 Maintenance
Real-Time ISMS Compliance thereby creating Audit Ready Environment.
Saves cost on costly ISMS Resources.
Saves productive time of your operations teams & costly resources which participate in ISMS Adherence & audit preparation hence "Increasing Productivity".
100% availability of ISMS team due to backup team availability.
High Customer Confidence thereby increases business stability and possibilities of winning new opportunities.
Your client's infosec queries are answered before time
Ensure High Quality IT Service Management
Outsource your ISO 20000 IT Service Management maintenance to Jinnicore to maintain ITSM controls, conduct audits, and ensure continuous service excellence.