ISO STANDARDS FOR IT AND TELECOMMUNICATIONS
IT and telecommunications
Protect information and deliver reliable technology services.
We help technology providers and telecommunications operators prepare ISO management systems for information security, service management, continuity and privacy.
Reliable technology starts with reliable processes
We start with your activities, locations and existing practices, then identify the procedures, records and responsibilities the management system should cover.
Information risk management
Identify critical information, services and dependencies and agree proportionate controls.
Consistent service delivery
Define service commitments, incident handling and change control.
Continuity of services
Set recovery priorities and test arrangements for critical systems.
Privacy responsibilities
Map processing roles and document responsibilities for personal information.
Support tailored to your activities
We build on the processes and records your teams already use and agree what needs to change.
Software and digital products
Connect development, release, access and change management procedures.
IT support and infrastructure
Set service levels, incident and escalation procedures and supplier controls.
Telecommunications services
Review network operations, service continuity and dependencies across partners.
Recommended ISO standards
Use these recommendations as a starting point. The right standards depend on your activities, risks and customer requirements.
ISO/IEC 27001
Information security management
Manage information security risks and demonstrate control decisions.
Learn about ISO/IEC 27001ISO/IEC 20000-1
IT service management
Plan, deliver and improve services against agreed requirements.
Learn about ISO/IEC 20000-1ISO 22301
Business continuity management
Prepare for interruptions and coordinate recovery of critical services.
Learn about ISO 22301ISO/IEC 27701
Privacy information management
Manage privacy risks and responsibilities for personal information.
Learn about ISO/IEC 27701
Select the standards that fit your needs. An integrated management system can share procedures and documentation across several standards.
How we work with you
Review your activities
We discuss your services, locations, teams and customer requirements to agree a practical scope.
Prepare the documentation
We prepare or update procedures and records for the chosen standards using the evidence you already have.
Check readiness
We review how procedures are applied and identify what needs to be completed before the audit.
Support the certification process
We submit the agreed documentation and support you during preparation. The independent certification body assesses conformity and makes the certification decision.
Certification covers the management system within an agreed scope. Your organisation remains responsible for applicable legal and operational requirements.
Frequently asked questions
Answers on choosing standards, planning the scope and getting ready for assessment.
Which standard should an IT provider consider first?
Consider ISO/IEC 27001 for information security and ISO/IEC 20000-1 for service management. The choice depends on the contracts, services and risks involved.
Can the scope include cloud services?
Yes. Define the services, dependencies and responsibilities for providers and your team.
Can we reuse current security procedures?
Yes. We review policies, ticketing records and controls before identifying gaps.
Can several standards share procedures?
Yes. Document control, audits, management reviews and other common processes can be shared where appropriate.
Can we use the documentation we already have?
Yes. We review your existing procedures and records, then identify what needs to be added or updated for the agreed scope.
Prepare your organisation for certification
Tell us about your activities, locations and goals. We’ll recommend suitable standards and prepare a quote for the agreed support.