ISO 27001 is an international standard published by the 'International Organization for Standardization' (ISO) that defines requirements for establishing, implementing, maintaining, and continually improving an information security management system.
What Does ISO 27001 Certification Mean?
Securing the certification means that Spinergie has implemented an information security management system that meets the requirements of the standard. This gives our clients confidence in knowing that we have undertaken a comprehensive programme of security controls to protect our systems and the data held within them.
Spinergie will:
Maintain standards in order to pass annual audits to retain this certification.
- Undertake a continuous cycle of monitoring and improving our security practices.
- Follow the risk-based approach inherent to ISO 27001 to identify and take action for all threats and vulnerabilities.
What steps we took to achieve IS0 27001 certification
No one department is responsible for security at Spinergie, instead each department takes a share of that responsibility. This means our entire team is aligned in best security practices. Here’s the steps we took to achieve our certification:
Step 1: We created a task force across teams (leadership, engineering, G&A, HR…).
Step 2: We defined our ISMS (information security management system) scope. To emphasise our strong commitment to security we included all teams and operations with coverage for all of our client solutions.
Step 3: An assessment of our current security position allowed us to audit our practices and bring in further standardization and improvement.
Step 4: We implemented security controls and document policies. By setting up high standards we continue to push ourselves to maintain the best practices.
Step 5: We undertook employee training. With human error the main source of data breaches we improved our training programs to improve the security education of every employee and to raise awareness of cybersecurity risks.
The ISO 27001 certification is the international gold standard and we are proud to show that it proves our assets are protected against ever-evolving cyber threats. Through a systematic approach of ongoing evaluation, treatment and improvement, we endeavor to effectively manage these threats and keep our system and client data confidential and secure.
Get in touch for more information: contact@spinergie.com
.webp)
.webp)