IASME Cyber Assurance – an alternative information assurance governance standard for SMEs

Although ISO27001 is the globally recognised benchmark for Information Governance, smaller organisations often find it challenging to get ISO27001 certified due to cost and effort involved.

The IASME (Information Assurance for Small and Medium Enterprises) Cyber Assurance standard aligns with the UK Government’s 10 steps to Cyber Security and includes additional Data Privacy controls. It provides smaller companies within a supply chain with a suitable and affordable method to demonstrate their level of information security.

IASME Cyber Assurance certification shows that you are taking the right steps to protect customer information. It includes an assessment of your General Data Protection Regulations (GDPR) compliance.

What are the benefits of IASME Cyber Assurance?

IASME Cyber Assurance demonstrates the integrity of your information security practices. A risk-based assurance, IASME looks at aspects such as physical security, staff awareness and data backup.

It will:

• Prove your cyber security, privacy and data protection measures are effective
• Offer assurance to your stakeholders that your security has been assessed or audited independently by an accredited third-party
• Show a clear picture of your organisations current cyber security level and ensure processes are documented
• Give your organisation a competitive advantage and retain more business

You can use IASME Cyber Assurance (also referred to as IASME Governance) as a stepping-stone to achieving the ISO27001 at a later stage.

By engaging with us, you can rely on RightCue’s established methods to efficiently achieve the cyber assurance credentials. We provide you with all mandatory documentation and processes required by an IASME certification body.

IASME Cyber Assurance – Level 1

The self-assessed IASME certification option requires you to complete an online questionnaire about the controls you have in place to govern information assurance.

Our phased approach to implementation of IASME Cyber Assurance

If you choose to implement Cyber Assurance within your organisation, RightCue will work with you to define policies, establish industry best practices, embed risk management as a core of your security governance and management processes.

Phase 2: Information Security Management System

We assist you with defining your information security and privacy management system by providing you with policies, procedures and other core documentation adapted specifically for your business and organisation culture. We assist you with implementing technical controls – at a minimum these include the controls required by the UK government’s Cyber Essentials Scheme as well as best practices to protect your key information and systems. We also work with you on change management to ensure a seamless transition to these new processes with as minimal disruption to your business and existing ways of working as possible.

At the end of phase 2, you will be ready to achieve self-certification to Cyber Essentials and IASME Cyber Assurance level 1.

IASME Cyber Assurance Level 2

What makes us stand out?

• Extensive and thorough understanding of business, technology, and regulations
• Consistent praise from our clients for exceptional customer service and high-quality deliverables
• Availability of a diverse pool of skilled professionals to cater to various industry sectors
• A flexible approach that allows us to adjust our services to meet your specific needs, whether scaling up or down