Governance, Risk and Compliance
At every level of the organisation, understanding and managing risk is critical to overall corporate success. Espion teams with companies to help them understand their risk profile, define their risk appetite and meet their obligations to industry regulations and compliance standards - including Data Protection and Employment Law, Payment Card Industry Compliance requirements and EU Directives. The detailed requirements outlined in industry standards provide a baseline from which to define the policies and procedures needed to establish lines of accountability and enable organisations secure their information at all times.
ISO 31000 (draft) - Risk Management Standard
Risk assessment is an important, yet difficult, first step in risk management. Identifying the range and extent of risks to your information is the basis for formulating and implementing the appropriate controls that mitigate or reduce any identified risks. Espion has engaged with companies from diverse industries and of various sizes to successfully apply proven methods to assess their appetite for risk – so as to develop the appropriate strategy to manage it.
ISO 27001 - Information Security Management System
ISO 27002 (formerly ISO 17799) provides a common and proven basis for developing high organisational security standards and effective security management practice. Employing the best practices detailed in ISO 27001, Espion works with organisations to identify, manage and reduce the range of threats to which information is regularly subjected.
PCI DSS - Payment Card Industry Data Security Standard
PCI DSS is a set of guidelines, measures and controls developed to help merchants implement strong security precautions to ensure safe credit card usage and secure information storage. Espion helps merchants facing the increasing instances and sophistication of fraud to leverage the requirements set out in the standard to safeguard their reputations, their own interests and those of their customers.
Governance, Risk and Compliance Datasheet (PDF)
How does the ISO 27001 standard apply to my organisation?
Request a workshop