What is Base27, the ISMS for information security?

Securing information is a comprehensive process, and one that continually stays on the agenda. A good ISMS can help your organisation keep working on information security in a structured way and keep it in order. Get to know Base27, the ISMS from Axxemble.

Base27 is a tool that supports your organisation with professional information security and privacy protection. It helps you set up your information security in a practical way. Base27 supports policy development, communication, risk analysis and control, among other things.

In this blog article, we answer the question: 'What is Base27, the ISMS for information security?'. To do so, we'll cover:

• Information security
• Management system or ISMS
• Functionalities of Base27

With Base27 from Axxemble,you'll quickly have your information security in order. Discover it for yourself and try Base27 30 days for free.

Information security

Information security is becoming increasingly important for organisations, the government and consumers alike. As a result, information security is increasingly becoming a standard requirement from users, customers and/or clients. It makes sense that you want your information security to be in order, but how do you go about it?

That's not easy, since information security is complex and extensive:

• Frameworks and legislation are extensive and require specialist knowledge from employees or those responsible within the organisations;
• Cooperation between business, IT and legal is required. In practice, this cooperation doesn't always happen automatically;
• There's an abundance of information, making it difficult to maintain overview and structure;
• It's difficult to keep up new processes/ways of working;
• The required demonstrability is difficult to guarantee and involves a lot of work.

It's also difficult for many organisations to attract the right knowledge and resources to get started quickly. That's why the solutions needed should be practical and straightforward.

Even so, the core process of information security isn't difficult or expensive. In fact, it mainly comes down to the following processes and tasks:

• Inventory information and its value in terms of availability, integrity and confidentiality for all stakeholders;
• Analyse the risks of incidents relating to these aspects;
• Implement countermeasures to make risks manageable;
• Check the effectiveness of the countermeasures.

Management system or ISMS

Information security is an ongoing process and needs to be supported by the entire organisation. To do this properly, it's necessary to set up a so called management system, or more specifically an Information Security Management System, ISMS.

A management system, or ISMS, ensures that everything related to information security is managed as a process, creating a cycle of continuous improvement.

Base27 offers you the support needed to implement and maintain such an ISMS. Base27 forms the ISMS with which you manage and continuously improve everything.

Functionalities of Base27

To offer this kind of support in the field of information security, Base27 has the following capabilities and functionalities:

Policy and awareness

• A ready to go documented framework based in ISO 27001, including policy, organisation, process descriptions and procedures;
• Review through an approval process (workflow);
• Drafting and sharing newsletters within the organisation.

Implementation and control

• Overview (inventarisation) of processes and systems, including the management of authorisations;
• Carrying out risk analyses and risk control;
• Implementation of countermeasures based on frameworks and legislation;
• Management (handling) of (security) incidents;
• Keeping track of processing activities and agreements in line with the GDPR;
• Mapping out suppliers and applying selection criteria;
• Maintaining an asset register for hardware, software, licences and so on;
• Drawing up and verifying contingency plans;
• Carrying out internal audits and supporting external audits;
• Dashboards and reporting.

Implementation and planning

• Implementation plan for certification;
• Annually repeated operational planning.

Try Base27

Would you like to discover for yourself whether Base27 is right for your organisation? You can now try Base27 free and without obligation for one month. After this month, you can decide whether to continue using Base27 or not.

Would you like to know more about Base27? Or are you looking for a platform to specifically get and keep your information security in order? Feel free to get in touch with us. We're happy to help.