The Norwegian Meteorological Institute has initiated the work with certifying selected parts of the organisation in accordance with the ISO/IEC 27001 standard. A preliminary project has been implemented which resulted in a gap analysis related to processes and measures/routines and a defined scope of the certification. The Institute has a well incorporated control system for risk, security and preparedness and the Institute is certified in accordance with the ISO 9001 standard for 2 fields. Our control system for information security management must be adapted and included in the overall control system.

The Norwegian Meteorological Institute has initiated the work with certifying selected parts of the organisation in accordance with the ISO/IEC 27001 standard. A preliminary project has been implemented which resulted in a gap analysis related to processes and measures/routines and a defined scope of the certification. The Institute has a well incorporated control system for risk, security and preparedness and the Institute is certified in accordance with the ISO 9001 standard for 2 fields. Our control system for information security management must be adapted and included in the overall control system.

The objective of the tender contest is to enter into a contract with a project manager who can assist the Institute in gathering and completing the Institute's processes, guidelines and routines related to information security in a clear information security management system with associated control routines and continuous improvement processes. The project manager shall assist the division manager and the information security manager in planning and implementing the operation of the control system during 2019-2020 with an objective of getting certified during 2020. The project manager must also participate in the practical work for the project. I.a. by preparing drafts for processes and routines in accordance with the best practice model.