demo-attachment-2426-gray-Dots-Copy

IQM Cyber are your Cyber Security Governance and Compliance experts

Accurate and comprehensive documentation is a fundamental part of any information system. Your organisation may have invested significantly in ICT, physical and personnel security but those assets must be adequately governed by frameworks, policy, plans and procedures.

A security documentation framework enables a comprehensive strategy over the direction, decisions and performance of your security management services. It also ensures that the implemented information security strategies are aligned with business objectives and consistent with applicable government policy, legislative requirements and International standards (ISO 31000/2700x, ISM, PSPF & NIST).

We will tailor our approach in accordance with your business and security context and can adapt any existing security policies within the framework.

Security Standards and Guidelines

Australian Government/International standards & guidelines provide a basis and direction for the development of security strategies and instructions. This includes the PSPF, ISM, relevant Government legislation and international standards (ISO 31000, 27001).

Security Frameworks, Policies, Risk and Security Plans

Security policies defines the overarching security objectives for the environment. Risk and Security Plans analyses risks within the environment and defines how the identified risks will be mitigated and who is responsible for implementing the defined controls.

Security Procedures and Technical work Instructions

Security Procedures detailed requirements for complying with the System Security Plan. The security procedures are structured based on defining the responsibilities attributed to each role. Technical work instructions are targeted documents for various ICT staff defining how one element of the system will be managed.

Our capability

We offer a service and capability that has evolved over dozens of engagements in both the public and private sectors. We have detailed knowledge of all Australian Government/International security standards and extensive experience in the development of security frameworks, policies, plans, guides and security training and awareness programs. We have a strong risk management focus and have decades of experience in providing practical guidance in meeting your governance and compliance requirements.

demo-attachment-738-Dots