GRC Solutions | IT Governance | Risk Management and Compliance for Information Technology

Cyber Security As A Service protections small businesses against cyber-attacks quickly and cost-effectively with expert support, training, and tools. Achieve security and peace of mind from day one - From the very start of the service, you’ll have access to your dedicated experts, tools, training, and support that can immediately be deployed to kick-start your journey to cyber security. Cyber-attacks may come in many different forms, but that doesn’t mean your solutions have to. Get everything you need from just one source, ensuring high levels of communication and continuity between teams, rapid response times to all issues, and solutions that integrate flawlessly.

The one-stop shop for cyber security and data privacy risk management solutions. 20% off site wide and an extra 20% off IT Governance training promotion

This is especially important when it comes to maintaining your compliance with data protection law. If you breach the UK DPA (Data Protection Act) 2018, UK GDPR (General Data Protection Act), or EU GDPR, you could face fines of up to £17.5 million (under the DPA 2018 and UK GDPR), €20 million (under the EU GDPR) or 4% of your annual global turnover – whichever is greater. Regulators such as the ICO (Information Commissioner's Office) made allowances for the pressure the pandemic put organizations under. Now that restrictions are lifting, however, they will be less lenient, so it is essential to put the necessary security measures in place if you are making hybrid working permanent. If your organisation is yet to consider the security practicalities of mixing on-site and remote working, IT Governance UK can provide all the support you need.

Ensure your organization can survive in the face of disaster; learn how to create and implement an effective business continuity plan. Identify your unique business risks, learn how to mitigate them and limit their damage. Developed specifically for the COVID-19 pandemic, this pack will help you tailor your business continuity plan to your organisation’s unique vulnerabilities.

Take the next step in your career and discover the benefits of IT Governance training. Book any classroom or live online training course this November for your free e-book and you’ll automatically qualify for the IT Governance Rewards Club. Plus, members receive 25% off training courses for life! That’s right, we’re offering a free e-book of your choice up to the value of £30 and 25% off all future classroom and live online training courses when you book before 30 November 2019.

IT Governance's complete staff awareness e-learning suite is a cost-effective way of organizing all of your staff awareness training under one, manageable contract. Access all 11 of our staff awareness e-learning programs and two challenge games to train staff on best practice processes. Ensure staff can spot and respond to cyber security and privacy risks. Comply with data protection and information security legislation and standards. Test learner knowledge to prove compliance for auditing purposes. Train staff under one, manageable contract with these cost-effective, annual licenses. Developed by industry experts our programs are updated every three months to ensure the content remains relevant. Gain access to any new content we release throughout your year-long contract. Customize the courses by adding links to company documents, policies, and procedures. Fast deployment with instant access to all of the courses. Reinforce awareness with monthly security updates, which include the latest news and tips.

IT Governance UK CREST-approved penetration testing finds vulnerabilities in your web applications and networks to keep you ahead of cybercriminals. CREST is an international not-for-profit accreditation and certification body for technical information security companies. As a CREST member company, IT Governance can give you the technical assurance you need that your cyber defenses are appropriate and effective. IT Governance UK expert penetration testers will analyze your cyber security vulnerabilities so you can defend your organization against cybercrime and prevent data breaches.

Browse ISO 27001 training courses from IT Governance. Achieve certification with ISO 27001 classroom, online & distance learning courses.

Browse these data protection, EU GDPR (General Data Protection Regulation), and DPA (Data Protection Act) 2018 training courses: UK classroom, online, and distance learning.

Business Continuity and the Pandemic Threat considers the corporate impact of pandemics and shows how best to prepare for and mitigate their effects. A must-have for organisations facing the coronavirus threat. Reveals what you should do to mitigate the risk, and limit the damage, of pandemic incidents. Provides guidance on creating and validating a pandemic plan for your business.

Find out more about the Cyber Essentials Scheme, designed by the UK Government to help all organizations demonstrate their commitment to cyber security. The Cyber Essentials scheme is a UK government-backed framework supported by the NCSC (National Cyber Security Centre). It sets out five basic security controls that can protect organizations against 80% of common cyber attacks. The scheme is designed to help organizations of any size demonstrate their commitment to cyber security – while keeping the approach simple and the costs low. The Cyber Essentials certification process is managed by the IASME Consortium (IASME), which licenses certification bodies to carry out Cyber Essentials and Cyber Essentials Plus certifications.

Find out more about the Cyber Essentials Scheme, designed by the UK Government to help all organizations demonstrate their commitment to cyber security. The Cyber Essentials scheme is a UK government-backed framework supported by the NCSC (National Cyber Security Centre). It sets out five basic security controls that can protect organizations against 80% of common cyber attacks. The scheme is designed to help organizations of any size demonstrate their commitment to cyber security – while keeping the approach simple and the costs low. The Cyber Essentials certification process is managed by the IASME Consortium (IASME), which licenses certification bodies to carry out Cyber Essentials and Cyber Essentials Plus certifications.

This bestselling guide is the ideal companion for anyone carrying out a GDPR compliance project, providing comprehensive guidance and practical advice. Now in its fourth edition, this bestselling guide is the ideal companion for anyone carrying out a GDPR (General Data Protection Regulation) compliance project. It provides comprehensive guidance and practical advice on complying with the Regulation, including: The GDPR in terms you can understand; The obligations of data controllers and processors; What to do about international data transfers; and Data subjects' rights and consent.

This toolkit includes all the necessary procedures and processes for ensuring that the controls you are implementing are aligned to the requirements of the Cyber Essentials Scheme. Designed to reflect the requirements of the Cyber Essentials scheme. Built on expert knowledge from numerous cyber security implementation projects. Ensure that the controls you are implementing are aligned to the requirements of the Cyber Essentials scheme. Access, manage and amend your documents from anywhere with Internet access, via our DocumentKits platform. This is an annual subscription product, however, you can cancel at any time. (T&Cs apply)

This pocket guide takes you through the essentials of cyber security, the principles that underpin it, vulnerabilities and threats, and how to defend against attacks. Cyber Security: Essential principles to secure your organization takes you through the fundamentals of cyber security, the principles that underpin it, vulnerabilities and threats, and how to defend against attacks.

A clear, concise primer on the GDPR this pocket guide provides an overview of what you need to do to comply with the Regulation. Thrive under the GDPR (General Data Protection Regulation) wherever you are in the world. This pocket guide will help you understand the Regulation, the broader principles of data protection, and what the GDPR means for businesses in Europe and beyond. It explains: The terms and definitions used within the GDPR in simple terms; The key requirements; and How to comply with the Regulation.

Develop an agile, adaptive approach to managing your business. Agile business management is a series of concepts and processes for the day-to-day management of an organization. This book includes: An agile, adaptive approach to business management that embraces change. Case studies provide real-world examples and guidance.

EU General Data Protection Regulation (GDPR) – An implementation and compliance guide, fourth edition: This bestselling guide is the ideal companion for anyone carrying out a GDPR compliance project, providing comprehensive guidance and practical advice. Now in its fourth edition, this bestselling guide is the ideal companion for anyone carrying out a GDPR (General Data Protection Regulation) compliance project. It provides comprehensive guidance and practical advice on complying with the Regulation, including: The GDPR in terms you can understand; The obligations of data controllers and processors; What to do about international data transfers; and Data subjects' rights and consent.

Browse this range of data protection, GDPR (General Data Protection Regulation), and DPA (Data Protection Act) 2018 training courses. If you're new to the world of data protection, you can opt for foundation-level courses and advance to the practitioner level. IT Governance UK also covers more specialized roles such as the certified DPO course and law enforcement data processing. The courses come in a range of training formats, including classroom, instructor-led online, and self-paced online.

Analyses the causes and effects of poor disaster management. An essential guide for anyone working in business continuity planning or disaster recovery. Reveals the themes that contributed to major disasters from the last 30 years. Proposes measures that could have minimized the risks and consequences. It explains how you can avoid making similar mistakes, reduce risks, and enable faster recovery when things do go wrong.

Learn from the experts how to achieve compliance with ISO 27001 Foundation Training Course in central London. Train with the ISO 27001 experts and receive a comprehensive introduction to the Standard’s features and benefits. Industry-leading course developed by the team that led the world’s first successful ISO 27001 implementation project. Our Ely / Online course provides the flexibility of attending our certified COVID-19 secure training center or booking as an online delegate. Learn from anywhere with our Live Online and Self-Paced options that allow you to study your way, keeping travel and costs down to a minimum. Find out more. Successful completion of this one-day course and included exam awards the ISO 27001 Certified ISMS Foundation (CIS F) qualification and 7 CPD/CPE points.

Browse standards from IT Governance. Choose from our official standards today & help guide your organization to compliance.

This is the newest version of ISO 9001. Users of ISO 9001:2008 should upgrade their systems to ISO 9001:2015 and will need the revised version of the Standard to keep their certificates up to date. ISO 9001:2015 specifies the requirements for a quality management system (QMS), where an organization: Needs to demonstrate its ability to consistently provide products and services that meet customer and applicable regulatory requirements. Aims to enhance customer satisfaction through the effective application of the system, including processes for continual improvement of the system and the assurance of conformity and applicable regulatory requirements. ISO 9001 is by far the world's most established quality framework and is currently used by more than a million organizations worldwide. It sets the standard not only for quality management systems but for management systems in general. All requirements of ISO 9001:2015 are generic and are intended to be applicable to all organisations, regardless of type, size and product provided. ISO 9001 helps all kinds of organisations succeed through improved customer satisfaction, staff motivation and continual improvement.

Expert-written ISO 9001:2015-compliant templates that are proven to save you time and money in fulfilling your documentation obligations. Simplify your ISO 9001 implementation with more than 80 pre-written ISO 9001 policies, procedures, work instructions, and records. The toolkit follows the ISO 9001 standard structure to help you map the documents to each clause for ease of use and simple implementation. Developed by ISO 9001 auditors and enhanced by 20 years of customer feedback, you can be sure you're on the right track. Developed by ISO 9001 auditors so you can be sure you are on the right track with all the documents needed to achieve demonstrable compliance and implement an effective QMS (quality management system). Ensure full coverage of the Standard with the comprehensive compliance tools, including the ISO 9001 Gap Analysis tool, Conversion tool, Roles and Responsibilities Matrix and Project Plan template.

ISO 14001:2015 addresses the need for companies to factor in both external and internal elements that influence their impact, including climate volatility. ISO 14001 2015 - Environmental Management Systems - Requirements with guidance for use. The ISO 14001 standard specifies the requirements for an environmental management system (EMS). An EMS is a framework for organizations to control the environmental impacts of their activities, products, and services, and continually improve their environmental performance. It supersedes ISO 14001:2004.

ISO 22301 is an international standard that provides organizations with the requirements to establish an effective BCMS (business continuity management system). The Standard enables users to prepare for and minimize the impact of disruptive incidents that could delay operations and impact the objectives of employees, suppliers, and customers.

The ISO 27001 bespoke consultancy service helps organizations achieve ISO 27001 certification as quickly and cost-effectively as possible. This made-to-measure service is offered through any combination of hands-on or in-house consultancy, or remote mentor and coach consultancy support, as fits your business needs.

This fixed-price package of tools, training, and consultancy will help organizations with little cyber security expertise implement ISO 27001. Receive a 100% guarantee of successful certification with our DIY package. The package features: Best-selling ISO 27001 tools and resources; One ISO 27001 Lead Implementer Live online training course; One ISO 27001 Lead Auditor Live Online training course; ISO 27001 staff awareness e-learning (add as many users as you need); and Up to 40 hours (five days) of expert consultancy, delivered according to a project plan.

This fixed-price package of books, tools, and training will help organizations with management system experience implement ISO 27001. Implement ISO 27001 faster with these best-selling products: ISO 27001 documentation toolkit; vsRisk risk assessment software - annual license; One ISO 27001 Lead Implementer Live Online training course; One ISO 27001 Lead Auditor Live Online training course; ISO 27001 staff awareness e-learning (add as many users as you need); Two best-selling ISO 27001 implementation guides; and ISO 27001:2013, ISO 27002:2013, and ISO 27000:2018 standards.

This ISO 27001 do-it-yourself package provides organisations with all the essential resources required to achieve ISO27001 certification. An affordable DIY package to help you achieve ISO 27001 compliance featuring: Copies of the three essential standards in the ISO 27001 family of standards; Our flagship ISO 27001 policies and procedures toolkit; vsRisk risk assessment software - Annual license; ISO 27001 staff awareness e-learning (add as many users as you need); and Two best-selling ISO 27001 implementation guides.