ISO 27001

ISO 27001 is a well-known and widely acknowledged security standard and certification for implementing and demonstrating an organization's security posture. Information security management system (ISMS) standard ISO 27001 stresses a risk-based approach to managing people, processes, as well as technological controls. 

The objective of the standard is to "provide standards for creating, implementing, maintaining, and steadily improving an Information Security Management System (ISMS)". If security breaches are identified, the standard's organized approach to auditing personnel and technology interdependence allows the measurement, comparison, and improvement of numerous operational standards. 

The independent certification to the standard is recognised around the world as an indication that your organization is aligned with information security best practices.

Speak to an Expert

ISO_27001-e1569528708701-removebg-preview

ISO 27001: Most Recent Standard

In the near future, ISO/IEC 27001:2022 will replace the present international standard for information security management, ISO/IEC 27001:2013.

The standard has been renamed from "Information technology – Security techniques – Code of conduct for information security controls" to "Information security, cybersecurity, and privacy protection – Information security controls."

On February 15, 2022, a publication notice was issued and the ISO 27002 standard was made accessible on the ISO standards store.

Can Accorian Assist With The Transition to ISO 27001:2022?

Accorian is developing the information for the changes, and we will be able to upgrade until the 2022 version, which is expected to be released shortly. If your organization's existing ISO 27001 certificate expires after 2024, certification bodies will conduct regular surveillance visits to ensure compliance with the new revision. However, if your organization's existing ISO 27001 certificate expires prior to 2024, you must upgrade by re-certification.

Why Do You Need ISO 27001?

Securing the information framework of an organization entails ensuring that security methods, regulations, and policy guidelines are tailored to the business's unique needs. By using a tried-and-true security management solution, gaps may be closed applying industry best practices. 

ISO 27001 is not only a security standard. Once implemented, the standard covers all organizational stakeholders and provides a scalable architecture that enables personnel, business units, or the entire company to assume responsibility for their environment's security. This strategy assists management in enhancing security and raising threat awareness at all organizational levels. 

Often, the ISO 27001 audit is a component of a bigger corporate evaluation that examines all elements of processes, technology, and supply chains.

Benefits of ISO 27001 Certification

With ISO 27001 certification, you will be able to:

01

Protect your organization's intellectual property as well as its private financial data.

03

Ensure that your information security incident response is meticulously prepared and proven successful, should a breach occur.

05

Ensure that key stakeholders as well as third parties are informed of complying with, and completely cognizant of your information security safeguards.

07

Protect your workers' and clients' personal information.

02

Align established information security policies to assist you in managing your access control model, communications safety, system acquisition, and the information security parts of business continuity planning, among other aspects.

04

Perform threat assessment and risk management actions in a straightforward, pragmatic, and open manner.

06

Comply with particular industry laws or operational procedures as established by any applicable regulatory authorities.

08

Safeguard your organization’s reputation and build a reliable brand image.

Why Choose Accorian?

We can assist you, whether you are seeking for a solution to strengthen your company's cybersecurity posture or need advice on how to establish an Information Security Management System (ISMS).

The success of Accorian's ISO 27001 Readiness Services is ensured by time-tested and efficient processes. A fully managed readiness service is ideal for businesses who wish to fulfil certification criteria but do not necessarily want to hire internal staff, or invest significantly on  risk mitigation, or could use an experienced approach to meet the requirement.

Our trained consultants have substantial field expertise with ISMS in addition to ISO 27001 Lead Auditor and Implementation certificates. This guarantees that we meet the needs of our clients and can give value-added assistance, leveraging our industry knowledge, awareness, and skills to satisfy certification criteria with cost-effective mitigation techniques. Moreover, we can program manage the complete endeavor for the organization and ensure its success.

Our ISO Services:

01

Risk Assessment

Risk assessment is used to discover, evaluate, and manage threats to information and the IT systems that support services. The objective of the risk assessment exercise is to detect possible threats to the organization's services.

02

Gap Assessment

The Gap Assessment activity reveals the degree of implementation for various controls according to the ISO 27001 standard and highlights the main and small gaps that might lead to non-compliance with the ISO 27001 standard and serious dangers if they are not mitigated over time.

03

Internal Audit

The internal ISMS audit will give an impartial assessment against the ISO 27001: 2013 standard, with the goal of enhancing the security of the organization's activities. It will assist the business achieve its goals by evaluating and enhancing the efficacy of ISMS, risk management, internal controls, and security governance procedures using a methodical, disciplined approach.

04

P&P - Drafting of Documentation

Organizations should create business-relevant Integrated Policies and Procedures in order to comply with the requirements of the ISO 27001 standard.

05

Scoping and Applicability

The scope statement delimits the information security management system of the company. It describes which organizational components, processes, or divisions are covered by ISMS. The ISMS scope has a direct bearing on the effort associated with your assets, risk management, and business processes.

06

Annual Sustenance

Providing sustenance assistance after the successful implementation of the ISO 27001 standard guarantees continuous improvement and long-term cultural acceptance.

07

Implementation Guidance

The use of auditors and consultants to predict dangers to an organization's information assets and establish measures to minimize such hazards

Diving Deeper: An External ISO 27001 Audit

An ISO 27001 audit involves a competent and objective auditor reviewing the ISMS or elements of it and testing that it meets the requirements of the standard, the organization’s own information requirements and objectives for the ISMS and that the policies, processes, and other controls are effective and efficient.

In addition to the compliance as well as potency of the ISMS, an ISO 27001 audit is intended to enable an organization manage its information security risks to a tolerable level. It will be important to check that the implemented controls minimize risks to a point where the risk owners are confident to endure the residual risk.

Surveillance/Sustenance Audit

The certification body uses surveillance visits to determine if your management system works in daily operations. It will concentrate on topics the certification audit couldn't verify, such as whether all events are documented, all measurements are done, all corrective and preventative measures are correctly recorded and executed, etc. A surveillance visit will additionally concentrate on problems identified as poor in the certification audit or earlier surveillance visit — minor nonconformities and auditor observations.

Internal Penetration Test

An internal pen test is a good way to find holes in applications that are behind the firewall of a company. This means making a fake attack by a bad person on the inside. Finding these weak spots could stop an attack by a disgruntled employee or a hacker who stole employee credentials and used them to get in.

Cloud Security Audits

Learn More

Cloud Security Audits

Auditing of your cloud security posture cloud to understand your posture can be quite challenging, we help our clients to conduct detailed cloud security audits through a manual and automated approach.

Learn More

Stage 1 Audit

The Stage 1 audit is a 'documentation review' audit because the auditor reviews your procedures and policies to ensure they’re in line with the requirements of ISO 27001.

Stage 1 Audit

The Stage 1 audit is a 'documentation review' audit because the auditor reviews your procedures and policies to ensure they’re in line with the requirements of ISO 27001.

This stage is more of a 'reconnaissance' audit or 'pre-assessment' when the auditor reviews your ISMS and determines whether an internal audit plan is in existence.

Stage 1 is completed on-site to determine whether your ISMS has met the minimum requirements of the Standard and is ready for a certification audit. The auditor will point out any areas of nonconformity and potential improvements of the management system.

Stage 2 Audit

Stage 2 is called the ‘certification audit’. During Stage 2, the auditor conducts a complete on-site inspection to determine whether the organization's ISMS conforms with ISO 27001

Stage 2 Audit

Stage 2 is called the ‘certification audit’. During Stage 2, the auditor conducts a complete on-site inspection to determine whether the organization's ISMS conforms with ISO 27001

They'll also seek for proof that the organization is following the documentation they've previously reviewed.

The auditor reviews their audit checklists and reports nonconformities to the client.

If all is in order, the auditor will certify that the organization's ISMS conforms with ISO 27001 and recommend the client for ISO 27001 certification.

Surveillance/Sustenance Audit

The certification body uses surveillance visits to determine if your management system really works in everyday operations.

Surveillance/Sustenance Audit

The certification body uses surveillance visits to determine if your management system really works in everyday operations. It will focus on topics the certification audit couldn't verify, such as, whether all the incidents are recorded, whether all the measurements are made, whether all corrective and preventive actions are properly recorded and implemented, whether the top management really supports and cares about the system, etc.

A surveillance visit will also focus on issues that were identified as weak in the certification audit or previous surveillance visit – minor nonconformities, as well as areas where the auditor has made some observations.

During the surveillance visit, the certification auditor will focus less on the documentation and far more on how the key processes are performed, assessed, and improved — in other words, if the system really works.

So don’t relax after your certification audit is over – the certification body is highly interested in finding out whether your management system is really functioning, and this is exactly what the surveillance visits will be focused on. And this is one more reason why you shouldn’t implement the standard only for the purpose of certification – the idea should be that the procedures and policies are really used in everyday operations.

Resources

Article

ISO 27001 AND ISO 27002 CHANGES FOR 2022

(ISO/IEC 27001:2022 and ISO/IEC 27002:2022) Written by Kiran Murthy & Eishu Richariya Recently a publication notice was released regarding the ISO 27001 and ISO 27002 changes in 2022, which states that, “all organizations having an ISO 27001:2013 (ISMS) will be required to map and update their controls in place in accordance with the new recommendations in the revised ISO/IEC 27002:2002, considering their organizational needs and context.” /*! elementor - v3.6.6 - 08-06-2022 */ .elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px} Highlight of ISO 27001 Updates /*! elementor - v3.6.6 - 08-06-2022 */ .elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=".svg"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block} ISO/IEC 27001:2022: All organizations having an ISO 27001:2013 (ISMS) will be required to map and update their controls in place in accordance with the new recommendations in the revised ISO/IEC 27002:2002, considering their organizational needs and context. ISO/IEC 27002:2022: The current version of ISO 27002 that contains 114 controls divided over fourteen chapters, and  the version of ISO 27002:2022 that will contain 93 controls will all be divided over four categories/themes: Chapter 5 Organizational (37 controls) Chapter 6 People (8 controls) Chapter 7 Physical (14 controls) Chapter 8 Technological (34 controls) THE NEW CONTROLS The guidance section for each control have been examined and updated to reflect current advancements and practices (as necessary). Additionally, each control now has a 'Purpose' statement and a set of 'Attributes' to be used in conjunction with cybersecurity principles and other industry standards. An update to the standard also needs to factor in today's threat landscape and security threats. The new controls are: Threat intelligence Information deletion Information security for the use of cloud services ICT readiness for business continuity Physical security monitoring Configuration management Data masking Secure coding Data leakage prevention Monitoring activities Web filtering CONTROL ATTRIBUTES These controls have five types of 'attributes' to make them easier to categorize: Control type (preventive, detective, corrective) Information security properties (confidentiality, integrity, availability) Cybersecurity concepts (identify, protect, detect, respond, recover) Operational capabilities (governance, asset management, etc.) Security domains (governance and ecosystem, protection, defense, resilience) Timing & Enforcement: A two-year transition period will be granted (unlike three years in several previous transitions). FAQs ON ISO 27001 and ISO 27002 1. Will Accorian help us transition to the new revision of ISO 27001:2022? We will assist in preparing material for the adjustments, and the organization will be able to upgrade until the 2022 revision is published, which is likely to occur soon, unless their existing ISO 27001 certificate expires after 2024, in which case, the certification bodies will conduct regular surveillance visits to ensure compliance with the new revision.  If the organization's existing ISO 27001 certificate expires before 2024, then they will need to upgrade through subsequent re-certification. 2. We have chosen to begin implementing ISO 27001 now; which controls should we apply considering future changes? Organizations should begin applying the clauses mentioned in the ISO 27001:2013 standard until this new standard is available. This will ensure the upcoming modifications and the work required to implement the new standard will be minimal. 2.1 How to plan a transition from ISO 27001:2013 revision to 2022 revision? Contrary to popular belief, there will be no ISO 27001:2022 but an addendum to 27001:2013 (dubbed ISO/IEC 27001:2013+A1:2022, source). Annex A will be superseded by a normative version of ISO 27002:2022's 93 new regulations (but without the useful hashtags). If ISO 27001:2022 is amended, organizations who have already implemented ISO 27001:2013 are undoubtedly thinking to themselves, "Oh no, now that the 2022 revision has been published, we have to start over." This is not true — while the 2022 revision does introduce some modifications, they are quite trivial. Organizations should...

View More

Article

ISO 27001 AND ISO 27002 Correlation & Differences in the updated versions of 2022

(ISO/IEC 27001:2022 and ISO/IEC 27002:2022)Written by Kiran Murthy & Tathagat Katiyar ISO 27001 – A Framework for Information Security Management Systems ISO 27001 is an ISMS (Information security management system) standard that emphasizes a risk-based approach to the management of people, processes, and technological controls. The standard's structured nature to auditing people and technology interdependence enables the measurement, comparison, and improvement of multiple operational benchmarks if security breaches are detected.The current standard, ISO/IEC 27001:2013, will shortly be replaced by ISO/IEC 27001:2022, the new international standard for information security management and will be renamed from "Information technology – Security techniques – Code of conduct for information security controls" to "Information security, cybersecurity, and privacy protection – Information security controls." Why should organizations implement ISO 27001 Businesses of all sizes face an imminent threat due to complex attacks, driven attackers and lack of current . Securing an organization’s information framework requires ensuring that security measures, controls, and policy guidelines fit the specific demands of an organization.Adopting a proven security management system can fill gaps utilizing accurate and tried best practices. ISO 27001 is much more than a security standard. When implemented, the standard includes all stakeholders across the organization and has a scalable design that allows individuals, business units, or the whole organization to take responsibility for security in their environment.This method aids management in strengthening security and increasing danger awareness at all levels of the organization. The ISO 27001 audit is frequently part of a more extensive organizational assessment that looks at all aspects of processes, technologies, and supply chains. ISO 27001 a risk-based framework Understanding that ISO 27001 is not a compliance tool but rather a risk-based framework and approach is critical. A risk-based strategy means that resources, cost, and time can be invested in minimizing threats based on the weightage of each threat and severity of the business risk. Thus making it possible to devote resources to initiatives that provide the greatest return on investment, rather than wasting time and money on "ticks in the compliance box" that have no real value. What is the difference between ISO 27001 and 27002? The distinguishing factor between ISO 27001 and ISO 27002 is that although an organization may achieve ISO 27001 certification, it cannot get ISO 27002 certification.ISO 27001 is the primary standard, whereas ISO 27002 is a set of support controls that serves as a guideline and assists organizations in implementing best security practices to get ISO 27001 certification. They are following the same ISO 27000 Family. How will the new ISO 27002 standard affect existing ISO 27001 certification or the current "first-time" implementation of the standard ? If the 2022 revision of ISO 27001 is broadly identical to the 2013 revision, a recent version of Annex A will be applicable once the standard is published. This will be consistent with the controls specified in the new ISO 27002. At the very least, organizations are expected to evaluate their risk assessment, identify appropriate new controls, and modify the 'Statement of Applicability' considering the revised 'Annex A'. Organizations should evaluate the controls for any implementation modifications, as there are some new controls and revised guidelines for the remaining controls. As previously stated, organizations are reminded that controls listed in ISO/IEC 27001 Annex A are not mandatory. ISO/IEC 27001 contains only two requirements: the use of Annex A's control set as a reference for the comparison process (6.1.3 c)) and the development of a 'Statement of Applicability' (6.1.3 d)). These standards remain unaltered in ISO/IEC 27001:2022 and are essential to prevent accidental omissions. Control themes of ISO 27001:2022 Market assurance and governance The advantages of...

View More

Article

Adobe's Common Controls Framework of Industry-acclaimed security standards

Today’s world is an ever-changing scenario with changes to the technology sector happening more frequently than ever due to emerging technologies. The case is quite similar in the field of Cyber Security. There are a few industry-acclaimed cybersecurity standards for governing the processes and execution of these standards. These standards are usually built upon a framework of control objectives that need to be implemented by the organizations to comply with these standards. Compliance is measured in terms of control objectives meeting the compliance criteria and also other regulatory and statutory criteria. Since most of these Cybersecurity standards speak of similar control objectives or lay emphasis on similar control areas, it is advisable to have the ‘Adobe’s Common Control Framework’, which means that if we are able to comply with a single requirement from a particular framework, in theory, we should be able to use the adherence of that requirement for ALL the similar frameworks. There are several approaches to achieving this Adobe's Common Controls Framework both in theory and in practice and will be discussed in detail later on in this article. The most relevant security and privacy frameworks are ISO 27001, NIST, PCIDSS, GDPR, SOC Type 2. There is a significant overlap of controls contained in these standards as all of these standards primarily deal with one requirement which is the protection of data. Protection of information from unauthorized disclosure, compromise, and theft forms the backbone or the building blocks of an Adobe's Common Control Framework. This leverages the fact that similar controls or that the essence of the controls is the same across standards and can be used to gauge the adherence or compliance of an organization to the standard. In actual execution, while gauging the compliance of an organization, the Adobe's Common Controls Framework is not only holistic but can reduce the effort and cost otherwise required by the organization to comply with individual standards. There are two methods of developing the Adobe's Common Control Framework for an organization and there are very subtle differences between the two methods. They are Controls harmonization and Controls Mapping. Controls Harmonization: Harmonization is the creation of a brand-new control language set from several source languages of standards taking into consideration content & context. In theory, the intent and meaning of the words and sentences remain intact, but the language and actual words of the individual standards have been changed with a new harmonized meaning defined. To achieve the usage of a single language as an industry, globally, it would have significant benefits and it would be the most efficient way to operate not only as security professionals but also as humans. Adobe’s Common Control Framework is an example of this type of construct. The benefits of having a single operating language can truly be amazing in terms of effort reduction and cost reduction. Control Mapping: Today, most brilliant and forward-thinking security professionals are using the control mapping method. The main idea behind this method is to keep the original language intact as much as possible while mapping and matching the intent and meaning of each sentence and word. This is the most practical and realistic approach because this is how humans fundamentally interact with each other globally. One can see this working in real life where two different languages are being spoken by individuals and kept mainly intact, but an interpreter or linguist is translating between the two — the map is developed in the mind of the linguist. Some real-life examples of mapping for cybersecurity frameworks can be seen in HITRUST Framework, Cloud Security Alliance Framework, and even the U.S. Government formally...

View More

Article

Risk Management Framework – Managing & Measuring what matters

A risk management program allows you to manage overall information security risk.  It is an approach to identify, quantify, mitigate, and monitor risks.  The reason to look at risk in a comprehensive manner is to make sure no one area is getting too much attention or, too little. Frameworks also help you identify the bigger elements of risk that need review and mitigation. Additionally, it help you to prioritize the treatment of certain risks. The adherence to risk frameworks also helps give your customers comfort that a standard risk management is in place and hence, reduce your audit burden.  Typically, a Risk Management program comprises of the following phases: Risk identification Risk analysis Risk evaluation Risk treatment Risk Monitoring A good risk management framework will have the following characteristics: Comprehensive in types of risks it covers Practical for an organization to implement Updated with current real-world risks Based on controls that can be reviewed and audited Reliable so that your vendors and customers can accept it There are many risk management frameworks that one can choose from and it important to understand the advantages of each. Common risk management frameworks include: NIST CSF SOC 2 ISO 27001 HITRUST NIST (National Institute of Standards and Technology) framework is a comprehensive cybersecurity framework (CSF).  It is very widely accepted across different company sizes and business domains. Most cyber-security professionals are well aware of this framework as it is readily available.  Although widely available and very popular there is no certified third-party audit mechanism. Hence, it can only be self-assessed.   SOC 2 Type 2 is an internal controls report based on the scope you define.  It is widely used in the United States to show the maturity of your controls.  A CPA firm that is part of the American Institute of CPAs (AICPA) conducts the audit & issues an assessment report.  The AICPA does not audit/review the assessment for completeness or quality.  HITRUST CSF is a framework that came leverages NIST, SOC, and ISO along with others to create a more comprehensive standard.  It is widely implemented in the United States by organisations in the healthcare space.  Unlike others, although there are external assessors that are involved in the certification process, HITRUST reviews all assessments and issues the certificate. Additionally, among all the frameworks above it tends to be the most expensive to implement.  It is important to choose a framework that matches your long-term security goals & needs.  At Accorian, we work with all of the above frameworks. We help organizations choose the right framework and aid with the implementation. This is done by augmenting our team into your security team to help steer the rollout, aid with query resolution, choosing of the right controls & workaround during mitigation advisory, facilitating the selection of vendors & products and end to end program management. 

View More

Article

TMRW Life Sciences Achieves Global ISO/IEC 27001 Certification

Accorian provides best-in-class cyber security and compliance service to innovative fertility leader raising the bar in technology within IVF (February 23, 2022 New York, NY) Accorian, a leader in providing best-in-class cyber security and compliance services, announced today that TMRW Life Sciences, Inc. (TMRW) has achieved its ISO/IEC 27001:2013 certification after a rigorous independent audit of its information security management systems. ISO/IEC 27001 is an international standard set by the International Organization for Standardization (ISO) that is widely considered a global mark of excellence when it comes to managing information. TMRW worked with Accorian, a consultancy specializing in technology risk assessment and ISO 27001 readiness, to prepare for the audit. There was a rigorous process implemented to ensure maximum security across all aspects of the TMRW platform. “Threats to security of information are becoming more common and advanced each day. Our clients rely on us to ensure they achieve compliance with international best practices to manage all risks related to information security and that their information assets are always protected. TMRW achieving this certification shows their continued commitment to security,” says Premal Parikh, Founder & CEO, Accorian. Achieving this certification is a major milestone on the TMRW security roadmap, and is one of many continued accreditations the company has in its sights. TMRW has an unwavering commitment to increasing standards of care, including the raising of the bar in relation to security through use of its innovative technology platform. “Our secure platform provides fertility clinics with a critical digital chain of custody for patient specimens that will be used in invitro fertilization (IVF), automating clinic operations that for decades have been manual,” said Amit Gupta, Chief Information Officer at TMRW. “As a company, we are dedicated to bringing a new standard of care to the fertility space through the use of our technology, which helps clinics scale safely and offers patients comfort knowing that their frozen eggs and embryos are secure.” The certification validates TMRW’s adherence to a rigid set of global requirements and best practices for establishing, implementing, maintaining, and continually improving an information security management system. This heightened level of security supports TMRW’s mission to safeguard the irreplaceable eggs and embryos used in the IVF process. About TMRW Life Sciences, Inc.: Founded in 2018, TMRW is a life sciences technology company providing the first and only automated, software-guided specimen management solution for the safe management of frozen eggs and embryos central to the IVF process. For the first time, frozen eggs and embryos can be digitally tracked using software safely stored with automated robotics and remotely monitored 24/7. With proprietary RFID labware and an end-to-end software management solution created by embryologists for embryologists, TMRW empowers clinics and gives peace of mind to patients on their fertility journey. TMRW’s platform has been adopted by leading clinics across the US and will soon be available in the UK and Europe. With significant continued growth in fertility services and the projected number of IVF births on the rise, TMRW provides a scalable solution for clinics bringing the care of frozen eggs and embryos into the 21st century and transforming possibilities for family planning. About Accorian: Accorian is a cybersecurity technology advisory firm that helps companies of all sizes improve their cybersecurity and technology compliance. Besides ISO 27001 certification, Accorian is also a PCI ASV and is one of the leading HITRUST assessors in the industry. They address the multitude of security, privacy and regulatory compliances including HIPAA, HITRUST and SOC-2.

View More

Article

BlueMatrix worked with Accorian and has achieved its ISO/IEC 27001:2013 Certification

BlueMatrix worked with Accorian, a consultancy specializing in technology risk assessment and ISO 27001 readiness, to prepare for the audit and we are proud to announce that BlueMatrix has achieved its ISO/IEC 27001:2013 certification after a rigorous independent audit of its information security management system. Congratulations! The firm guided BlueMatrix through an initial assessment of its existing processes and procedures to identify potential gaps, and provided continuous advice on how to address them. To know More Click Here

View More

What Our
customers are
saying about us

Read Testimonials

The Accorian Advantage

Accorian’s cybersecurity and compliance teams bring a wealth of experience to help navigate organizations through their information security journey. Our hands-on, white-glove approach combined with a goal-oriented, proven methodology brings both fiscal value and expertise to each of our clients. The facts speak for themselves.

    Ready to Start?

    We are Qualified

    we are qualified
    we are qualified
    we are qualified

    SECURITY COMPLIANCE & ASSESSMENT SERVICES
    CONSULTING & ASSESSMENT SERVICES

    PENETRATION TESTING

    RED TEAM ASSESMENTS

    TECHNOLOGY STAFFING

    Contact Info

    E. info@accorian.com

    T. +1-732-443-3468

    Contact With Us

    Office Address

    Accorian Head Office

    6,Alvin Ct, East Brunswick, NJ 08816 USA

    Accorian Canada

    Toronto

    Accorian India

    401,402, Prestige Towers, Residency Rd., Shanthala Nagar, Ashok Nagar, Bengaluru, Karnataka 560025, India

    Shukla CPA, d.b.a Accorian Assurance is a licensed, certified public accounting firm registered with the American Institute of Pubic Accountants (AICPA) and the Public Company Accounting Oversight Board (PCAOB). Esha IT Corp d.b.a Accorian is a global leader in cybersecurity and compliance professional services.

    © 2023 Accorian. All Rights Reserved.

      Ready to Start?

      Download Case study

      Download SOC2 Guide

      Human Resources Director

      Posted On: 09 May, 2022

      Drop your CVs to joinourteam@accorian.com

        Interested Position
        First Name
        Last Name
        Email
        Total Experience
        Mobile Number
        Upload Resume
        Cancel