PN-EN ISO/IEC 27001

Information Technology. Security techniques. Information security management systems. Requirements.

The ISO/IEC 27001 standard presents a model of information security management system and defines requirements for establishment, implementation, operation, monitoring, review, maintenance and improvement of the system.

Information being the precious resource of each company has measurable value and is continuously exposed to many threats. Therefore it should be the priority in managing of the organization to ensure security of information owned.

Information security management in connected not only with protection of information systems. It is used also to ensure security of personal data, business information and other information constituting the company secret.

Protection against loss of information is also the legal obligation of all entities conducting business activity, failing of observing of which is punishable by serious criminal sanctions. With the EU accession many legal acts appeared,  among them the Act on personal data protection is of particular importance.  Information systems and procedures of conducts should be adjusted to requirements of the act. All necessary measures should be taken to protect the information processed.

Implementation of information security management system increases the awareness of employees, helps to manage the risk and to establish objectives and rules of information security.

The benefits resulting from ISO/IEC 27001 standard implementation and certification mostly quoted by organisations:

• fulfilment of legal requirements,
• increased awareness of employees,
• better identification of threat sand reduction of their impact on activity of organization,
• adapting to legal requirements of management systems of organization,
• continuous improvement of quality of provided services,
• keeping confidentiality, integrity and availability of owned information,
• supervision over information processing processes,
• better management of risk factors,
• increased clients’ confidence

The ISO/IEC 27001 management system certification carried out by us is confirmed by both the PCBC certificate and the IQNET Association – The International Certification Network certificate recognized all over the world