What Is ISO27001 & Does It Matter?

ISO27001:2005 is the internationally recognised certification for DATA SECURITY. This assures you that:

• The company running the centre have developed an Information Security Management System (ISMS) which has been successfully tested and audited by an external auditor.
• Proper thought has been given to all aspects of data security, including physical and environmental issues as well as digital and electronic threats.
• That the company regularly reviews it's procedures and policies to ensure it is current.

Eleven areas are covered within ISO 27001:2005.

• Information Security Policy
  Is there management direction and a written policy to provide support and direction for information security activities?
• Organisational Security
  Is there an infrastructure to manage security within the organisation? - includes management forum and processes, third party access and outsourced arrangements?
• Asset Management
  Are organisational assets protected? - Includes inventory and classification.
• Human Resources Security
  Are the risks of human error or fraud reduced? - Includes personnel screening and T&C's, security training and incident reporting.
• Physical and Environmental Security
  Is unauthorised access to business premises controlled? - Includes physical security, secure areas, equipment security, maintenance and disposal.
• Communications and Operations Management
  Are information processing facilities operated in a correct and secure manner – Includes operating procedures and change control, system planning, protection against malicious software, backup, media handling, information exchange, and email security.
• Access Control
  Is access to business information and processes controlled on the basis of business and security requirements? - Includes user and password management, mobile users, access to applications and network services.
• Information Systems
  Is security is built into information systems? - Includes development and support processes, cryptography and data validation.
• Incident management
  Are events and weaknesses reported, and are events consistently managed?
• Business Continuity
  Are critical business processes protected from the effects of major failures or disasters?
• Compliance
  Does the firm take measures to avoid breaches of law, statutory , regulatory or contractual obligations

Paradise & ISO27001

Paradise is audited by BSi and has been certified since 2006 having been found to meet the ISO 27001:2005 standard.

In addition to providing a world-standard service this enables Paradise to provide you with a copy of our certification which can help greatly with issues of compliance to quality systems.