Felaj Consulting and Associate

Welcome ISO/IEC 27007 publication‎
To continue providing us with the products and services that we expect, businesses will handle increasingly large amounts of data. The security of this information is a major concern to consumers and companies alike fuelled by a number of high-profile cyberattacks.

The havoc caused by such attacks runs from celebrities embarrassed by careless photos, to the loss of medical records, to ransom threats amounting to millions that have hit even the most powerful corporations.

Where such data contains personal, financial or medical information, companies have both a moral and legal obligation to keep it safe from cyber criminals. That’s where International Standards like the ISO/IEC 27000 family come in, helping organizations manage the security of assets such as financial information, intellectual property, employee details or information entrusted to them by third parties.

ISO/IEC 27001 is the best-known standard in the family providing requirements for an information security management system (ISMS).It’s an International Standard to which an organization can be certified, although certification is optional.

For the person charged with auditing a particular company it can be a complex process. Likewise, getting ready for a smooth audit requires preparation and attention to detail. That’s precisely why ISO/IEC 27007 Information technology —Security techniques — Guidelines for information security management systems auditing exists. It helps both parties thoroughly prepare by providing clear guidance. First published in 2011, ISO/IEC 27007 has now been updated to align it to ISO/IEC 27001:2013.

It provides guidance on the management of an information security management system (ISMS) audit programme, the conduct of internal and external ISMS audits in accordance with ISO/IEC 27001, and the competence and evaluation of ISMS auditors. Additionally, it provides extensive guidance for auditing all requirements stated in ISO/IEC 27001. It’s intended to be used in conjunction with the guidance contained in ISO 19011:2011, and follows the same structure as that International Standard.

ISO/IEC 27007 bring benefits to any type of business and is designed to be applicable for all users, including small and medium sized organizations.

In ISO Management System...We don't build the business we build the the people and the people build the business.
The quality of service delivery or quality of products rest on the shoulder of the people and their processes

When things don't work as they should it often means that standards are absent. But when ISO standards are applied, life is just so much richer. Agree?

Do you have a hard time getting support for your ergonomics process? Perhaps this is because the other leaders around you have bought into the myth that ergonomics has to be expensive. Let’s help them with that.
By now, you’re probably aware of the well documented benefits of ergonomics.
You’re ready to take action. You want to get started and take advantage of the ergonomics opportunity for your company. Most importantly, you know that an effective ergonomics process will be great for your people.
But then, somewhere along the line, your plan to take advantage of the ergonomics opportunity was squelched by the misinformed idea that ergonomics is expensive and there just aren’t enough funds in the budget to get started right now.
So now what?
Well, your next move is to make a case for the value of ergonomics.
Is ergonomics expensive?
Ergonomics isn’t about fancy, expensive equipment. Ergonomics is not about the latest fads and trends that seem “cool” or what the trendy companies are doing. Beware of the marketing hype – there is a whole cadre of supposedly “ergonomic” products out there that aren’t based on science.

The perception that ergonomics is expensive misses the mark. It’s about the value, not the cost. The key is to communicate the value of the ergonomics return on investment over and over and over again. By making continual improvements to your workplace and documenting the value created, you’re building up a dividend of trust, goodwill and money for your ergonomics process.‎
For a research, case studies, articles and more on the value of ergonomics
For more research, case studies, articles, and tools on the cost-justification and value of ergonomics, contact Felaj Consulting and Associates
Why an Ergonomics Program Makes Good Business Sense!

According to Safety Management system good ergonomics programs are always cost effective – they save more than they cost, and many studies have shown this. He writes that, “when ergonomics is an integral part of basic job and workplace design and not an afterthought, it’s no more expensive to choose a good ergonomic design for a workplace than to choose a bad design. The difference isn’t ergonomics, it’s education.