Integrated Management System

Methodologies for managing two or more compliance requirements

Single Annual compliance annual program
Single risk and opportunity register
Single framework of evidences for managing external assessments/certifications

Overview

The requirement for integrated management system arises when the management has the challenge of fulfilling two or more requirements, and wishes to create a single program.

The expectation is to create a single management system that addresses the historical compliances and adaptive to future ones.

In ESA, we have proven and successful methodologies to achieve integrated management system.

We design our compliance programs that ensure that one correctly designed task will ensure compliance across all applicable requirements.

We have several experiences of implementing more than one standard.

Here are some of our experiences

ISO 27001 + GDPR + ISO 20000 + ISO 9001 for an access control and biometric provider
SOC 2 + SOC 1 + HIPAA + ISO 27001 for printing outsourcing company
ISO 27001 + 22301 for a Telecom provider covering 4 international locations that included UK, Portugal, Romania and India
ISO 27001 and ISO 20000 for an Internet Service Provider
PCI DSS, ISO 27001 and ISO 22301 for a card service provider
SOC 2 for an ISO 27001 organisation
COBIT, ISO 27001, ISO 22301 and ISO 20000 certified Bank
SSAE 18/ISAE 3402 - SOC 1/COSO for ISO 27001 certified knowledge process outsourcing service provider

We have governance methodology wherein we can integrate any two or more standards using a control, policy and transaction approach to design your successful integrated management system.