The implementation of ISO 27001

Answer:
Your situation is very normal, so don’t worry, we can help you. The first thing that you need, before all, is to obtain the management support. To do this, you need to show them the benefits of the ISMS, that we can resume in 4 points: Compliance, Marketing edge, Lowering the expenses, and putting your business in order. For more information about this, please read this article “Four key benefits of ISO 27001 implementation” : https://advisera.com/27001academy/knowledgebase/four-key-benefits-of-iso-27001-implementation/

After this, is very important treat the implementation as a project (like other project), so this article can be useful for you “ISO 27001 project – How to make it work” : https://advisera.com/27001academy/blog/2013/04/22/iso-27001-project-how-to-make-it-work/

And after, you should define the scope the ISMS, write an ISMS policy, define the risk assessment methodology, et c. For more details, please read this article “ISO 27001 implementation checklist” :https://advisera.com/27001academy/knowledgebase/iso-27001-implementation-checklist/

Finally, maybe our online course can be also very interesting for you “ISO 27001:2013 Foundations Course” : https://advisera.com/training/iso-27001-foundations-course/