Compliance with ISO 27001/27002

How do you ensure information security in your organization? One effective way is to follow internationally recognized standards such as ISO 27001 and ISO 27002. Discover how Stratsys can help you work systematically with compliance to these standards.

What are ISO 27001 and 27002?

ISO/IEC 27001 is an international standard for information security management that describes how to establish, implement, maintain and improve an ISMS. The objective is to protect the confidentiality, integrity and availability of information by applying a risk management process. Certification to ISO 27001 demonstrates that an organization has structured processes to systematically manage information security.

ISO/IEC 27002 complements ISO 27001 and provides guidelines and best practices for information security management. It provides a set of security controls to manage information security risks and serves as a practical guide to implementing the controls in ISO 27001. It helps organizations to select appropriate security measures based on their needs and risks.


ISO 27001 & ISO 27002 compliance - how Stratsys can help you

Improved overview of current situation

With the help of Stratsys, you can create a current state analysis of your information security work to identify differences between the organization's current state and the desired target state. This helps you land in clear activities of different measures for your organization.


Implementation and operationalization

A common challenge that organizations have is to operationalize various requirements from ISO 27001, to have it documented and defined, and to distribute the responsibility within the business. With Stratsys, you can document the requirements in a simple and structured way and get the information to the respective person responsible in the organization. With this, you get control of the process and follow-up in the same place.


Classification and requirements for assets

Do you know how and what requirements you should set for your information assets? In Stratsys, it is possible to classify information assets based on confidentiality, accuracy and availability and then set the right and relevant requirements for individual information assets. This is to ensure the right protection and to minimize the risks identified in connection with the assets.

control package

More features for successful work

Current situation analysis

Get a complete overview of the rules and legal requirements related to your information security work. This will save you valuable time and provide management with a complete overview.

Continuous improvement

Identify areas for improvement and work actively to drive continuous improvement to reach your target.

Engaging the business

Create the right conditions to be able to drive the work forward with action plans and follow-ups where everyone takes joint responsibility.

Effective data collection

Facilitates the process of collecting and compiling data from different parts of the organization in a consistent way.

Discover more benefits of Stratsys

With Stratsys' Information Security & Data Protection product ,you can easily gather the work around regulatory requirements in one platform and at the same time engage the entire organization in the work.

background-3d-blobs-stratsys (1)

Frequently asked questions and answers

What is ISO 27000?

ISO 27000 consists of a series of standards that focus on information security management.

What is the purpose of the ISO 27000 series?

The ISO 27000 series aims to provide guidance on how organizations can manage and protect their information securely. Each standard has its own purpose to support organizations in different ways with guidance on information security.

What is the difference between ISO 27001 and ISO 27002?

Main purpose: ISO 27001 specifies the requirements for an ISMS and is certifiable, while ISO 27002 provides guidelines and more detailed information regarding security controls to support the implementation of ISO 27001.

Use: ISO 27001 is used to build an information security management system, while ISO 27002 is used as a guide to implement the controls needed to meet the requirements of ISO 27001.

Certification: Organizations can be certified against ISO 27001, but not against ISO 27002.

What is the purpose of ISO 27001 certification?

The purpose of obtaining ISO certification is to continuously improve operations through a systematic process-based approach, protect the organization's information and information assets, and increase the trust of citizens, customers and stakeholders.

To obtain an ISO 27001 certification, the organization needs to meet the requirements of the standard. Certification is obtained after an independent audit has confirmed the organization's compliance with these standards.

What benefits can organizations get by following ISO 27001?

Standards are always good, whether you choose to work to this standard or others. To name a few benefits that organizations can get by following ISO 27001:

  • Satisfied and confident customers
  • Increased competitiveness
  • More efficient way of working
  • Clearer structure in the organization