STREAM as an Information Security Management System (ISMS)
Core Assurance Components
Through its elegant integration of Risk Management, Compliance Management and Security Events (Incidents) related data within its centralised database, STREAM simplifies the process of establishing an ISMS, and substantially reduces the effort required to maintain the various essential data.
STREAM also provides an essential Metrics capability, which allows Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) to be defined and measured objectively.
KRIs are then used to measure residual risks, KPIs help to assess the effectiveness of control implementation, and Metrics are also available in relation to Security Incidents and Near Misses.
STREAM’s unique approach to measuring residual risk against management-defined risk appetite, makes it easier than ever before to engage effectively with senior management, to involve senior stakeholders in the compliance and risk management processes, and to measure and demonstrate the overall value of the ISMS to the organisation. These are of course all important factors in formal certification against ISO 27001.
Click here to read further how STREAM addresses some of the more detailed aspects of implementing an ISMS to be compliant with ISO 27001.
Register for email news
Latest
-
Success story - UK Department for Education
The Department for Education uses STREAM to support its ISO 27001 compliance programme and reporting against the Information Assurance Maturity Model.
-
Information Security Europe 2010
Significant interest was expressed in the STREAM suite of products at Information Security 2010. It is clear that comprehensive risk and compliance management is becoming a key requirement for public and private organisations.
-
STREAM Seminar - Ljubljana May 2010
Richard Mayall presented a workshop in Ljubljana, Slovenia on 20 May 2010 on 'A better way to manage all your risks'. The workshop considered how STREAM can automate assurance management systems and support standards compliance.
