27799 Annual Maintenance
Once ISO Standard is implemented, the organization will be required to undergo periodic maintenance and Audits to ensure that the system is being maintained on real time basis to ensure the upkeep of effective compliances.
What Happens If ISO 27799 Maintenance Stops?
- ❌ No Health Data Audits
- ❌ No ISO 27799 Compliance
- ❌ No Healthcare Staff Training
- ❌ No Risk Assessment
- ❌ No Real Time Patching
- ❌ No Penetration Testing
- ❌ No Incident Logs
- ❌ No Periodic Audits
Consequences of Health Audit Failure
- ⚠️ Exposure of Personal Health Information (PHI)
- ⚠️ Severe Legal Penalties & Healthcare Regulatory Recalls
- ⚠️ Breakdown of Health Management System Trust
ISO 27799 Maintenance Service Deliverables
Keeping the site ready for Security Audits based on ISO 27799 Standards at real time basis
Conducting Internal security audits, including surprise audits and scheduled audits.
Conducting Periodic ISMS & Management Review Meetings as per the periodicity
Monthly ISMS Dashboard Compilation as per ISO 27799 Standard requirements
Monitoring of ISO 27799 compliance and Legal Requirements for all the processes.
Monitoring Risk Management Process to mitigate the risks with appropriate treatment of risk
Monitoring ISMS Objectives of the organization and Highlighting the issues which effect the achievement of objectives.
Conducting VA-PT for 5 IPs every Quarter & 1 Web Application (20 pages) annually.
Monitoring the vulnerability reporting and patching mechanism and suggesting the appropriate mitigation action.
Training the Trainers every Six months or on any new changes in the policies and providing certification to 1000 employees.
Monitoring Information security Incident Management Process to monitor and verifying efficacy of root cause analysis of the security Incidents.
Keeping all required controls, reports and matrices of all the related departments ready as per ISO 27799 standard.
Monitoring the BCP Tests & Fire Drills conducted as per the periodicity by the client's respective teams.
Suggesting the improvements to security posture of the organization to the Management on regular basis.
Closing the audit observations along with corrective and preventive actions.
Interacting with CB's & Clients for all upcoming audits and closing the audit findings
Helping in filling up RFPs of various clients and attending client meetings / conferences.
ISO 27799 Annual Maintenance Schedule
| Periodicity | Resource & Delivery Plan |
|---|---|
| Daily Compliance Adherence | Offsite daily Monitoring by Jinnicore Team for daily compliances via mail alerts |
| Weekly Compliance Check | Offsite Monitoring & Review by one Sr. Resource for all Departmental Compliances |
| Monthly Compliance Dashboard | Onsite Presence of Jinnicore Security Manager once a month. |
| Quarterly VAPT / WAPT | Onsite presence of Senior Resource to conduct VAPT |
| Half Yearly Audits | Onsite Presence of Senior Resource for Half Yearly Audits |
| Yearly BCP Drills | Yearly BCP Tests |
Benefits of Outsourcing ISO 27799 Maintenance
Real-Time ISMS Compliance thereby creating Audit Ready Environment.
Saves cost on costly ISMS Resources.
Saves productive time of your operations teams & costly resources which participate in ISMS Adherence & audit preparation hence "Increasing Productivity".
100% availability of ISMS team due to backup team availability.
High Customer Confidence thereby increases business stability and possibilities of winning new opportunities.
Your client's infosec queries are answered before time
Protect Health Information with ISO 27799
Outsource your ISO 27799 Healthcare Information Security maintenance to Jinnicore to maintain PHI security, pass audits, and ensure compliance.