I am about to introduce an information management system
Medium-sized enterprises that want to introduce an information security management system or are generally interested in the question of information security risks will find in us a reliable partner who can offer suitable help.
Practice-oriented approach that does not necessarily work towards a certification, but aims to quickly improve and continuously increase information security.
The Pallas service at a glance
Pallas helps to set up and develop information security management systems
Why ISMS? An ISMS ensures
The Pallas model concept
The DIN ISO/IEC 27001 standard or the BSI standard 200-1 form a reliable basis for an ISMS. But initially, a company usually doesn’t possess the required experience, so it makes sense to call in the Pallas experts. The ISMS is made feasible for SMEs thanks to the Pallas model concept:
O: Organisational guidelines
P: Process descriptions for security management and risk analysis
I: Individual risk assessments for assets in specific security scenarios using the action checks stipulated in the standard
S: Introduction of a software tool to support the ISMS (optional)
An outcome supported by the ISMS is the conscious management and reduction of risks. This holistic view ensures better coordination of security measures and avoids gaps and overlaps. Not least, it ensures the fulfilment of legal and contractual requirements.
Pallas has defined three modules to ease the path into consulting, but still to provide the perfect support where there is a complete information security management system.