IT Compliance

Over half of all data leaks in Australian businesses are due to ‘Human error’ with the other areas consisting of ‘Malicious or criminal attack’ & a small area of ‘System fault’. Generally, these data leaks are due to poor policies, training & technical controls. Getting IT compliant is a pathway to avoid these risks. (Source: AON Insights. – Australian Business empowering company)

The International Organization for Standardization (ISO) has been a major, if not the primary governing body over compliance in most industries since 1941. For many industries, standards auditing & compliance is simply a cost of doing business & necessary for all industries to keep their working to an acceptable standard, this is no different in IT. With many ISO standards introduced, the major standard in cyber security is the ISO 27000 series, specifically ISO 27001 – Information Security Management System (ISMS). What compliance means with ISO 27001 is that a company assesses all the risks associated with its IT infrastructure. Then, controls & policies are put in place to ensure the most ‘appropriate’ level of security measures have been implemented to secure each asset.