{"id":4648,"date":"2013-10-22T21:40:44","date_gmt":"2013-10-22T21:40:44","guid":{"rendered":"https:\/\/multiacademstg.wpengine.com\/27001academy\/blog\/013\/10\/22\/how-to-address-main-concerns-with-iso-27001-implementation\/"},"modified":"2025-07-09T14:30:59","modified_gmt":"2025-07-09T14:30:59","slug":"how-to-address-main-concerns-with-iso-27001-implementation","status":"publish","type":"post","link":"https:\/\/advisera.com\/27001academy\/blog\/2013\/10\/22\/how-to-address-main-concerns-with-iso-27001-implementation\/","title":{"rendered":"How to address main concerns with ISO 27001 implementation"},"content":{"rendered":"

Last week I delivered two webinars on the topic of ISO 27001<\/a>, and I have asked the attendees to send me their top concerns regarding ISO 27001 implementation before those webinars.<\/p>\n

I\u2019ve summarized most common concerns into the following five areas \u2013 I\u2019ve presented them in the webinars, and here is a more detailed explanation on how I feel they should be addressed:<\/p>\n

1) The effort required to transition from the 2005 revision to 27001:2013<\/h2>\n

It is true that every company certified against the ISO 27001:2005 will have to transition to the 2013 revision within two years, and it is true that the 2013 revision has some new requirements, while some are gone. It is also true that this process won\u2019t be finished in a couple of hours, but it certainly doesn\u2019t have to be anything close to the effort of the initial implementation of the standard.<\/p>\n

The key is in careful planning \u2013 if you know exactly which steps you need to take, you will reduce this transition effort to a minimum. With this in mind, read my article How to make a transition from ISO 27001 2005 revision to 2013 revision<\/a>.<\/p>\n

2) Successfully communicating a beneficial reason why a company should implement ISO 27001<\/h2>\n

The key is to determine benefits for the business side of the organization \u2013 benefits that are easily understandable and that bring clear value to the business, not to IT. Because, after all, the decision about ISO 27001 is not going to be made by the head of the IT department, but by your senior management.<\/p>\n

In my view, there are four potential benefits that may be applicable to companies: (1) compliance, (2) marketing advantage, (3) decreasing costs, and (4) optimizing processes. Click here to read the details: Four key benefits of ISO 27001 implementation<\/a>.
\n

<\/div>