tender for implementation of integrated security management system isms iso-27001 and certification audit for iso 27001.- 1 preparing an integrated isms policies and objective for uttarakhand sldc 2 performing a requirement study and gap analysis for iso 27001 isms framework 3 design of risk assessment framework 4 design and documentation of iso 27001 isms framework including training for employees of uttarakhand sldc 5 certification by accredited body 6 surveillance audit 1st year ( one year after certification ) 7 surveillance audit 2nd year ( two year after certification ) 8 surveillance audit 3rd year ( three year after certification )