Standards & organisational workflows

Information Security & Standards Management

Assets, risks, audits and corrective actions in one operating framework, developed for Permon Information Technology.

In operation
Illustrative setting for Information Security & Standards Management
Standards & organisational workflows
Development year
1402 SH (Solar Hijri)
Tiva Safe’s role
Bespoke information-security workflow analysis and implementation
Project status
In use
Client
Permon Information Technology

Information security as a management cycle

This platform supports the design, implementation and operation of an information security management system based on the ISO 27000 family. It connects assets, risks, documents and audit activities in a shared working structure, rather than leaving information-security management distributed across unrelated files.

Identify assets, assess risks, define responses

Asset, vulnerability, threat and incident management provide the context for risk analysis. Assessment and response options sit alongside those records, connecting decisions to a defined subject and background. Multi-organisation and multi-user operation, with authentication and access control, supports structured organisational use.

  • Assets, vulnerabilities and threats
  • Incident management and risk assessment
  • Risk responses and user access control

Documents connected to the work

Policies, procedures and instructions are supported alongside prepared forms and custom form design. Centralised records keep relevant evidence accessible within the same structure. The ISO/IEC 27001-based implementation framework can be customised to the organisation’s requirements.

  • Policies, procedures and instructions
  • Prepared forms and custom form design
  • Centralised records across organisations

From audit finding to effectiveness review

Audit and conformity management, corrective action and effectiveness monitoring complete the follow-up cycle. Reporting, PDF/Word/Excel import and export functions, and email and SMS notifications support that work. The platform supports standards-related processes; using it does not by itself confer certification.

From this experience to your challenge

Related solutions

NSR activity licence

Open original size Tiva Safe activity licence from the Kerman Computer Trade Organization; document supplied by the company