Internal control is the means by which an organisation
meets its business objectives and manages its risks. There are
many risks, including:
-
financial risk (e.g. credit and market risk)
-
quality risk (e.g. as addressed by the
Quality Management System (QMS) ISO 9001)
-
information risk (e.g. as addressed by the
ISMS standard ISO/IEC 27001)
An ISMS need not be a separate management
system. Indeed Gamma's own internal control system contains both a
QMS and an ISMS and is certified to both ISO 9001-2000 and ISO/IEC 27001. Our internal control index page will take you a page
describing Gamma's internal control system, showing how this can be
done. |
Click on
the image to view the page. Close the window to
resume the tour. |