For Blue Mobile Systems and GuardTools, this means we now have additional systematic tools to enhance our information security for both internal and external stakeholders, including customers and suppliers.
The certification process has been intensely educational, and we have acquired several practical methods for both immediate and long-term use.
Another significant benefit for us is that we can show for our systematic, safe, and sustainable work within the “ISO 27001 Standard”. Something that we consider a natural yet very positive side effect, if you will, of the certification process itself.
We also want to take the opportunity to thank both Avarn Sweden, who has played a crucial role as requirements specifier throughout the certification process, and our server partner Tripnet, who obtained ISO certification simultaneously with us, contributing to our overall information security through a collaborative and constructive partnership. Thanks!
So now we celebrate by patting ourselves on the back and tooting our own horn a little bit for working our way to this important milestone. TOOT!
But, tomorrow (or perhaps next week to be honest) we begin our next certification journey: the process of implementing and certifying us against ISO 9001 – standard for quality management! Tallyho!
Facts on ISO/IEC 27001 – International Standard for Information Security
ISO/IEC 27001 promotes a holistic approach to information security: vetting people, policies, and technology. An information security management system implemented according to this standard is a tool for risk management, cyber-resilience and operational excellence.
To obtain an ISO/IEC 27001 certificate, the following is required:
- The organization has a management system that meets the requirements of the standard to be applied.
- The system is a natural part of the organization’s daily operations.
- The system is described.
- System and description are continuously maintained.
