January 2007: Successful ISO/IEC 27001 Certification NII Consulting (Network Intelligence (India) Pvt. Ltd.) is the first information security consulting company in India to be awarded the ISO /IEC 27001 certification.
ISO/IEC 27001 is an Information Security standard which requires creating, managing and maintaining a robust information security management system. We have successfully implemented an information security management system across all our internal processes and consulting services for the Mumbai operations. This certification re-affirms the adoption of proven security policies and procedures as part of the information security management system. It also ensures the protection of assets, management of risks and security of all information related to the company, clients, and partners. Our Information Security Management System complies with requirements of ISO/IEC 27001:2005 for the following scope
The management of information security of consulting services in managment systems international standards compliances, penetration testing, vulnerability assessment, security audits, computer forensics, training and support services. |
The certifying body: BSI is a reputed standards-making body (NSB) and its Certification Services are designated by the United Kingdom Accreditation Services (UKAS) as qualified to audit for compliance to the ISO/IEC 27001 standard.
Domains covered in the certification process: The ISO 27001 standard outlines 11 domains within which security controls have been identified. These controls are implemented as applicable to the organization. These domains are:
 Security Policy
 Organization of Information Security
 Asset Management
 Human Resource Security
 Physical and Environmental Security
 Communications and Operations and Management
 Access Control
 Information Systems Acquisition, Development, and Maintenance
 Information Security Incident Management
 Business Continuity Management
 Compliance (for legal and regulatory requirements)
|