In an era where data security is paramount, compliance with the FBI CJIS Security Policy has become a critical necessity for organizations handling criminal justice information (CJI). The FBI Criminal Justice Information Services (CJIS) Security Policy provides stringent guidelines to protect sensitive information and maintain the integrity of criminal justice operations. At MorganHill Consulting Group, LLC, we specialize in navigating these complexities, offering comprehensive consulting and advisory services to ensure your organization achieves and maintains compliance.

Per ISO/IEC 27002:20222 | 5.9 - Information Security in Project Management, “The organization should identify its information and other associated assets and determine their importance in terms of information security. Documentation should be maintained in dedicated or  existing inventories as appropriate.”

Per ISO/IEC 27002:20222 | 5.12 - Classification of Information, “Information should be classified according to the information security needs of the organization based on confidentiality, integrity, availability and relevant interested party requirements. Additionally, per ISO/IEC 27002:2022 - Labelling of Information, “An appropriate set of procedures for information labelling should be developed and implemented in accordance with the information classification scheme adopted by the organization.”

Per ISO/IEC 27002:20222 | 5.10 - Acceptable Use of Information and Other Associated Assets “Personnel and external party users using or having access to the organization’s information and other associated assets should be made aware of the information security requirements for protecting and handling the organization’s information and other associated assets.”

Per ISO/IEC 27002:20222 | 5.11 - Return of Assets, “Personnel and other interested parties as appropriate should return all the organization’s assets in their possession upon change or termination of their employment, contract or agreement.”

In a world where cyber threats are growing more prevalent by the day, and where data is synonymous with power, safeguarding sensitive financial information is now a top priority for every business. For an industry leading software company in Dallas, Texas, specializing in financial data analytics modeling, this commitment to data security was at the heart of their operations. Recognizing the critical importance of securing their financial data, the company embarked on a transformative journey toward ISO 27001 certification - the globally recognized standard for Information Security Management Systems (ISMS). As they began their journey, they turned to MorganHill, a proven and trusted ISO 27001 partner that provided the expertise and guidance needed to navigate this certification process successfully.

For a leading healthcare company based in Austin, Texas, and specializing in lab analysis modeling, safeguarding patient data and maintaining the highest standards of information security were not just priorities; they were non-negotiable requirements. That's where MorganHill stepped in, with a commitment to guide and assist this healthcare innovator on its journey to ISO 27001 certification - the globally recognized standard for information security management systems (ISMS).

When we talk about one of the most highly regulated industries, the broader healthcare market definitely is tops on the list. From HIPAA to HITECH, HITRUST, and more, healthcare compliance is alive and well - and very complex, demanding and costly. For an Atlanta-based healthcare technology company specializing in medical diagnostic imaging, achieving ISO 27001 certification was not just a goal, it was a crucial step towards ensuring the protection of sensitive patient data. This success story illustrates how MorganHill, a leader in ISO 27001 consulting, played a pivotal role in guiding the Atlanta-based company through the certification journey. 

In the ever-evolving landscape of cybersecurity and information security management, the need for robust standards and frameworks has never been more critical. For over a decade, MorganHill has been at the forefront of providing comprehensive solutions for organizations looking to secure their information assets effectively. One such tool that has been setting the industry standard for years is the "ISMS 27001 Scoping & Gap Assessment Workbook."