The ISO/IEC 27001 is a globally recognized standard for Information Security Management Systems (ISMS). This service allows organisations to certify their cloud solution and the relevant security controls against this standard. Organisations that achieve ISO/IEC 27001 certification demonstrate their commitment to establish and maintain robust security practices. AWS is already certified against this standard, but their certification does not extend to the specific customer solution. This is where customers can use the IISRI service to certify their specific SaaS solution and provide together with the AWS certification security assurance across the whole stack.

ISO/IEC 27001 provides a systematic and structured approach to managing sensitive information, ensuring its confidentiality, integrity, and availability. This involves identifying information security risks, implementing appropriate security controls, regularly assessing and improving the security measures, and fostering a culture of security awareness throughout the organization.

The ISO/IEC 27001 readiness & certification offering covers the following two service packs:

1. ISO/IEC 27001 readiness: Gap assessment with report and Implementation support.
2. ISO/IEC 27001 Certification: two stage audit with report and certification
   The customer can choose one or both packs.