The Information Transfer Policy supports with the implementation of controls for activities relating to data transfer within an organisation. All organisations are responsible for security of data and this policy will set the rules for transferring any corporate or personal data within the organisation, as well as to an external party.
Our Information Transfer Policy is complied with relevant clauses and control titles of an ISO 27001 compliant Information Security Management System (ISMS). It has additionally been developed to meet the requirements of GDPR.
For any organisation who has implemented an Information Security Management System (ISMS) that need to be ISO 27001 certified, the Information Transfer Policy is one of the requirements to get certified.
You can also purchase our additional ISO 27001 related documents, such as IT Equipment and Secure Disposal Policy, Acceptable Use Policy, Data Classification Policy to enrich your information security controls within your organisation.
This document can be purchased individually or as part of a package. If you are implementing a management system based on one or more of the main ISO standards, then our management system packages might be more cost effective.
Our standard management system packages cover a combination of ISO 9001, ISO 14001, ISO 27001 and ISO 45001. However, additional standards can easily be included if needed.