GuardTools Trust Center
Our Security Commitment – GuardTools by Blue Mobile Systems continuously protects both our own and our customers’ systems, secures all data, and maintains trust.
The GuardTools Solution
Blue Mobile Systems AB (BMS) develops and maintains GuardTools, an IT-based operational system built specifically for the security sector. Along with secure data handling, continuous system monitoring, and dedicated training, we also provide the hardware you need—ensuring your operations and your customers’ information are always protected.
Information Security Management System (ISMS)
Our system follows ISO 27001 and supports employees in systematically managing security.
We focus on:
- Supplier requirements
- Internal and external audits
- Updates according to laws and regulations
- Ongoing training
- Security topics in meetings
- Continuous improvements
- Incident and deviation reporting
Compliance and Certifications
We comply with:
- ISO 27001
- GDPR (General Data Protection Regulation)
- The EU’s NIS-2 Directive
- Other relevant standards like ISO 22301 and CIS Controls
Policy Overview
We maintain internal guidelines for:
- Access and identity management
- Secure development and operations
- Risk and incident management
- Data classification and privacy
- Supplier and third-party management
- Change management
- Remote work
- Document management
Statement of Applicability (SoA)
We maintain a document outlining which security controls are implemented per ISO 27001. This document is not publicly shared for security reasons but can be discussed in secure meetings if needed.
Security Controls at a Glance
- Controls aligned with ISO 27001 Annex A
- Risk management integrating GDPR and NIS-2 requirements
- Planned improvements such as MFA rollout and vulnerability scanning
Frequently Asked Questions (FAQ)
Can I get copies of your policies?
- Our policies are internal, but we can summarize and discuss them if needed.
How do you handle incidents?
- We have documented procedures for prompt detection, handling, and reporting of incidents.
How do you secure suppliers?
- We set security requirements for suppliers and regularly follow up.
Are you GDPR compliant?
- Yes, we comply with GDPR and have clear procedures for personal data.
How do you comply with NIS-2?
- Our system supports the requirements and reporting obligations of the NIS-2 Directive.