What if the breach already happened?
ISO/IEC Compliance
A Seamless Process with Risk Associates
Risk Associates is your trusted partner on the journey to ISO/IEC 20000-1 certification. Our process includes:
Initial Meeting & Objective Definition
Our journey together begins with a conversation. In this phase, you share insights about your company, your management system, and your ISO/IEC 20000-1 certification goals. Based on this discussion, you will promptly receive a detailed and transparent offer tailored to your unique needs.
Project Planning and Pre-Audit (Optional)
For larger certification projects, a planning meeting becomes invaluable. This is an opportunity to get acquainted with your auditor, develop a customised audit program for all involved areas and locations, and identify areas of improvement and strengths in your management system. While this step is optional, it often proves beneficial for organisations seeking comprehensive insight.
Stage 1 & 2 Certification Audit
The heart of the certification process comprises two essential stages.
System Evaluation and Certification
Upon successful completion of the certification audit, an evaluation of your management system takes place. The outcome is a report that outlines your compliance with ISO/IEC 20000-1. If your organisation has met all the standard requirements, you will be granted the prestigious ISO/IEC 20000-1 certificate, a testament to your commitment to data protection.
Surveillance Audits
To maintain the integrity of your ISO/IEC 20000-1 certification, we conduct surveillance audits on an annual basis. These audits ensure your organisation continues to meet the vital requirements of ISO/IEC 20000-1. This ongoing support is crucial for the continuous improvement of your data protection management system and overall business processes.
Recertification
ISO/IEC 20000-1 certification is valid for a maximum of three years. When the time approaches for your certificate to expire, we initiate the recertification process. This ensures that your organisation maintains alignment with the applicable standard requirements. Upon successful recertification, a new certificate is issued, cementing your dedication to personal information management.