ISO 27001

Unify Compliance. Reduce Costs.

The code of practice for International Organisation for Standardisation (ISO 27001) is recognised internationally as a structured methodology for information security management, and is widely used as a benchmark for protecting sensitive and private information.

ISO 27001 has been widely adopted as an umbrella over other requirements of law or regulation (like JSOX, SOX and the Data Protection Directive) or contractual standards (PCI DSS) because it requires companies to review such obligations when assessing risk. Organisations that choose to adopt ISO 27001 also demonstrate their commitment to high levels of information security.

REDUCING THE AUDIT EFFORT

Tripwire helps you achieve an ISO 27001 compliance certificate with a single integrated solution, and reduces compliance reporting efforts. The Tripwire® VIA™ suite combines the power of Tripwire® Log Center—log and SIEM—and the intelligence of Tripwire® Enterprise—FIM and configuration control—to deliver an automated solution designed to improve visibility into your security program and avoid breaches to protect your brand and data.

Tripwire VIA solutions allow you to meet all 11 major controls required as part of the ISO 27001 standard including:

  • Security Policy
  • Organisation of Information Security
  • Asset Management
  • Human Resource Security
  • Physical and Environment Security
  • Communications and Operations Management
  • Access Control
  • Information Systems Acquisition, Development and Maintenance
  • Information Security Incident Management
  • Business Continuity Management
  • Compliance