Networks and systems processing HMG protectively marked information require accreditation in accordance with HMG IA Standard No 2, “Risk Management & Accreditation of Information Systems”.  With the introduction of the Security Policy Framework, accreditation is now to be reviewed on an annual basis (Mandatory Requirement 36).

Idrach Ltd can provide assistance in all aspects of this process, whether conducting Risk Analysis in accordance with HMG or commercial standards, assisting in the production or review of Risk Management and Accreditation Documentation Sets, or helping to specify security controls to meet HMG Baseline Measures or to provide additional assurance.

We also provide assistance in the conduct of Privacy Impact Assessments and the preparation of Forensic Readiness Plans.