IP Performance gains ISO27001 accreditation
IP Performance are delighted to announce that they have successfully completed their accreditation against the ISO/IEC 27001:2005 - Information technology -- Security techniques -- Information security management systems -- Requirements ("ISO27001") standard and have been awarded ISO27001 certification by Andrew Bedford, ISO/IEC 27001 Lead Auditor at IMSM of Malmesbury.
IP Performance started investigating developing an ISMS and achieving ISO27001 compliance back in January 2009, and established a formal ISMS Task Force in April 2009, under the project management of Paul White.
"ISO27001 is relevant to all businesses, but especially in the IT industry where we may find ourselves holding vendors', distributors' or clients' classified or sensitive data as part of performing business with those partners", explained Pierre Ketteridge, Pre-Sales Consultant at IP Performance, who served on the Task Force. "More and more, manufacturers/vendors and distributors are asking that their business partners are ISO27001-accredited, and that they can, on demand, carry out third-party audits against them. Public Sector tenders routinely list ISO27001 compliance as a pre-requisite to bidding, and we are rapidly finding ISMS and ISO27001 an accepted - and required - part of the business landscape."
ISO/IEC 27001 requires that management:
- Systematically examine the organization's information security risks, taking account of the threats, vulnerabilities and impacts
- Design and implement a coherent and comprehensive suite of information security controls and/or other forms of risk treatment (such as risk avoidance or risk transfer) to address those risks that are deemed unacceptable; and
- Adopt an overarching management process to ensure that the information security controls continue to meet the organization's information security needs on an ongoing basis
“It was clear from the outset that achieving the standard would require a significant business commitment" commented Paul White, the Security Project Manager at IP Performance who headed up the project team. "In order to provide this buy-in from all parts of the Company the ISO27001 Project Team represented all business functions and was overtly supported by Company Directors. The initial information gathering and planning was extensive but once the required actions were agreed the project quickly gathered momentum and we were very pleased to see our efforts rewarded when we were awarded the certificate on February 25th.”
