Get in touch
 +41 (0)56 511 22 90
info@osmond.ch

Information Security Management System (ISMS)

International standards such as

  • ISO 27001: Global Standard for Information Security and
  • NIST CSF: National Institute of Standards & Technology Cybersecurity Framework

represent best business practice for an Information Security Management System (ISMS) and IT Governance. These standards are often required for contracting and third party risk management.

NIST CSF - the industry accepted standard

At Osmond we leverage the NIST CSF framework for establishing a pragmatic ISMS, as it is provides suitable guidelines, enjoys widespread acceptance and is preferred by executive management.


The frameworks provide a logical systematic methodology for managing cybersecurity risks. It is designed to help organisations of all sizes strengthen their policies, processes, procedures and implement sufficient controls and cost-effective measures.

Benefits of NIST CSF

  • Comprehensive, in-depth set of controls which can help prevent cyber-attacks, protect critical data.


  • Supports an adaptive and responsive posture of managing cybersecurity risk by including response and recovery functions.


  • Enables an integrated risk management approach to cybersecurity that can be aligned with business goals and leveraged to justify security budgets. 

Framework Functions, NIST 2.0 CSF (Source: NIST)

International standards are important for doing business.


Osmond helps organisations to achieve their cybersecurity and IT governance objectives following applicable standards to ensure compliance.


Successful implementation of an ISMS starts with an assessment of the current state of cybersecurity, followed by developing a roadmap for implementation, providing guidance on selecting tools and processes, and ends with measuring performance and risk.

We’re here to help!

Contact Us

Share by: