IASME Governance
The IASME Governance standard was created as an affordable and achievable alternative to the international standard, ISO 27001.
Get in touch
IASME Governance
The IASME Governance standard allows the small companies in a supply chain to demonstrate their level of cyber security and that they are taking good steps to properly protect their customers’ information. The IASME Governance assessment includes a Cyber Essentials assessment and GDPR requirements.
There are two levels of certification, IASME Governance and IASME Governance Audited
IASME Governance
This is a self-assessment questionnaire (SAQ) through the form of an online portal. The SAQ consists of around 160 questions about your security and controls including:
- Risk Assessments
- Backups
- Policies
- Incident Management
- Data Protection
- Operational Management
You will have up to six months to complete the answers. Upon submitting your answers, one of our experts will mark the SAQ. we will then arrange a suitable time to discuss any failing points or to let you know you were successful.
IASME Governance Audited
For audited, we will discuss with you the scope of the assessment and a convenient time to carry out an audit of your policies and process. The audit usually involves interviews with members of staff and a review of documentation and system configuration.
Renewals
The Self-Assessment is renewed annually. The audited certification is renewed at the end of years 1 and 2 by simply renewing the online IASME Governance assessment.
At the end of year 3 a full audit, as described above, is required again to renew the certification.
Providers we use
When selecting a SOC package for your business, several considerations should be made. Is it compatible with your existing IT infrastructure? Does the SOC platform align with your needs and safeguard your digital assets?
At Cybaverse, we offer packages with both Crowdstrike and Microsoft Sentinel meaning you're not limited to working with one provider that doesn't suit your businesses needs.
Benefits of this service
Benefits of Microsoft Sentinel
Benefits of Crowdstrike
How we work
Work with our clients and prospects to share knowledge and confirm cyber security direction and goals.
Enhance the service offering, looking to develop build on security processes each month.
Deliver training to staff to ensure a cyber security culture and enhance protection further.
Monitor and maintain standards ensuring that procedures are in place to review security protocols.
How we do it
SOC Services with Microsoft Sentinel
SOC Services with CrowdStrike
Cybaverse will engage with the client to determine their requirements and ensure that the engagement is correctly scoped to deliver on those requirements and make sure all of the correct legal requirements are satisfied.
At the start at of all compliance engagements we carryout a gap analysis to gain an understanding of the current posture mapped to the required standard
Our experienced industry experts will advise and consult on best practises, not only to reach the standard required but beyond with a wider security strategy in mind.
Cybaverse offers audit and certification services for Cyber Essentials, Cyber Essentials Plus and IAMSE Governance and can support the ISO27001 audit process
On completion we provide a comprehensive report, however we do not stop there, we offer a continued partner relationship to support your business at all times
Frequently asked questions
We work with
Let's talk
We’re here to help! Submit your information or call the office on +44 (0)1243 670 854 and a member of our team would be happy to help.
Contact us
