What Is ISO27001 & Does It Matter?
ISO27001:2005 is the internationally recognised certification for DATA SECURITY. This assures you that:
- The company running the centre have developed an Information Security Management System (ISMS) which has been successfully tested and audited by an external auditor.
- Proper thought has been given to all aspects of data security, including physical and environmental issues as well as digital and electronic threats.
- That the company regularly reviews it's procedures and policies to ensure it is current.
Eleven areas are covered within ISO 27001:2005.
Information Security Policy
Is there management direction and a written policy to provide support and direction for information security activities?
Is there an infrastructure to manage security within the organisation? - includes management forum and processes, third party access and outsourced arrangements?
Are organisational assets protected? - Includes inventory and classification.
Human Resources Security
Are the risks of human error or fraud reduced? - Includes personnel screening and T&C's, security training and incident reporting.
Physical and Environmental Security
Is unauthorised access to business premises controlled? - Includes physical security, secure areas, equipment security, maintenance and disposal.
Communications and Operations Management
Are information processing facilities operated in a correct and secure manner – Includes operating procedures and change control, system planning, protection against malicious software, backup, media handling, information exchange, and email security.
Is access to business information and processes controlled on the basis of business and security requirements? - Includes user and password management, mobile users, access to applications and network services.
Is security is built into information systems? - Includes development and support processes, cryptography and data validation.
Are events and weaknesses reported, and are events consistently managed?
Are critical business processes protected from the effects of major failures or disasters?
Does the firm take measures to avoid breaches of law, statutory , regulatory or contractual obligations
Paradise & ISO27001
Paradise is audited by BSi and has been certified since 2006 having been found to meet the ISO 27001:2005 standard.
In addition to providing a world-standard service this enables Paradise to provide you with a copy of our certification which can help greatly with issues of compliance to quality systems.