Standards

Standards service that we Offered

Complying with the international standards is not compulsory, but still required by the community. We help you to implement the technical specifications or other precise criteria in the standard to implement an agreed, documented, repeatable, harmonized way of doing something.

Our Strander service

iso

ISO 9001:2015

ISO 9001 is the international standard that specifies requirements for a quality management system (QMS). Organizations use the standard to demonstrate the ability to consistently provide products and services that meet customer and regulatory requirements. It is the most popular standard in the ISO 9000 series and the only standard in the series to which organizations can certify.

iSO

 14001:2015

SO 14001 sets out the criteria for an environmental management system and can be certified. It maps out a framework that a company or organization can follow to set up an effective environmental management system.

Designed for any type of organization, regardless of its activity or sector, it can provide assurance to company management and employees as well as external stakeholders that environmental impact is being measured and improved.

iSO

20000-1:2018

ISO/IEC 20000-1:2011 is a service management system (SMS) standard. It specifies requirements for the service provider to plan, establish, implement, operate, monitor, review, maintain, and improve an SMS. The requirements include the design, transition, delivery, and improvement of services to fulfill agreed service requirements.

iSO

22301:2019

This document specifies requirements to implement, maintain and improve a management system to protect against, reduce the likelihood of the occurrence of, prepare for, respond to and recover from disruptions when they arise.

The requirements specified in this document are generic and intended to be applicable to all organizations, or parts thereof, regardless of type, size, and nature of the organization. The extent of application of these requirements depends on the organization’s operating environment and complexity.

iSO

27001:2022

ISO/IEC 27001:2022 specifies the requirements for establishing, implementing, maintaining, and continually improving an information security management system within the context of the organization. It also includes requirements for the assessment and treatment of information security risks tailored to the needs of the organization. The requirements set out in ISO/IEC 27001:2022 are generic and are intended to be applicable to all organizations, regardless of type, size, or nature.

ISO
31000:2018

ISO 31000:2018 provides guidelines on managing risk faced by organizations. The application of these guidelines can be customized to any organization and its context.

ISO 31000:2018 provides a common approach to managing any type of risk and is not industry or sector-specific.

ISO 31000:2018 can be used throughout the life of the organization and can be applied to any activity, including decision-making at all levels.

PCI DSS

If your company accepts, processes, stores, or transmits credit card information you need to maintain a secure environment. PCI DSS standard provides 6 goals that should be met through 12 requirements as per the current version 3.2.1 which was released in May 2018. PCI SSC is now targeting a Q1 2022 publication date for the new PCI DSS v 4.0. TQM provides you with a QSA that will help you comply with the PCI DSS standard. 

NESA

As cyber threats such as hacktivism and cybercrime evolve, so must our efforts to defend against them in a coordinated and systematic manner. To align and direct national cybersecurity efforts, the UAE Government created the National Electronic Security Authority (NESA) to improve our national cybersecurity and protect our national information and communications infrastructure. As part of this mandate, NESA developed the UAE Information Assurance (IA) Standards to provide requirements for raising the minimum level of IA across all relevant entities in the UAE.

CBoJ Cybersecurity

Whether your company is subject to cyber security regulation or enterprise governance or any related regulation, TQM will provide expertise in:

  • Cyber security regulation gap assessment
  • Processes maturity assessment 
  • Nonconformity remediation action plan
  • Users’ cyber security awareness sessions