Compliance & Regulation

The 2e2 Information Assurance Practice provides the essential skills and expertise to work with organisations to reduce risk and achieve compliance.

Our industry experts assess an organisation's security strategy, infrastructure, policy and operations ensuring legislation requirements are met.

Our Information Assurance practice has the skills and experience to advise and assess against the requirements of the following standards:

• CESG
  • IS1 – IS7
  • Good Practice Guides
  • Manuals T,V,P,S
  • Legacy CESG Standards
• Cabinet Office
  • Security Policy Framework
• PCI-DSS
• ISO27001

Working with industry leading Information Assurance Practitioners including:

• ISO27001 Lead Auditors
• CESG Listed Advisor Scheme (CLAS) Consultants
• PCI DSS Qualified Security Assessors
• Certified Information Systems Security Professionals

All of 2e2’s Information Assurance Consultants are SC or DV Security Cleared.

ISO27001

With an in-depth knowledge and experience in this area, 2e2 can assist an organisation in implementing IS027001 practices and procedures.

2e2’s ISO27001 Lead Auditors can engage at any stage of the IS027001 project, providing expertise and services tailored to an organisation's needs. These include:

• Gap Analysis against IS027001 
• Advice on achieving certification 
• ISMS Policy creation and advice 

CLAS Consultancy

2e2’s CESG Listed Advisor Scheme (CLAS) Consultants can provide Information Assurance advice to government departments and any public sector organisation which holds any form of restricted data marked up to SECRET to ensure that all data is stored and handled in line with CESG Policies. Our CLAS consultancy offerings include:

• Creation of basic Risk Management Accreditation Document Sets (RMADS) for applications
• Creation of full Risk Management Accreditation Document Sets (RMADS)
• Review of and update to existing ADS / RMADS
• Restricted / Confidential data projects
• Code of Connection