Techno World Inc - The Best Technical Encyclopedia Online!

THE TECHNO CLUB [ TECHNOWORLDINC.COM ] => Techno News => Topic started by: RealWire on August 22, 2013, 07:16:09 PM



Title: Business Optix achieves ISO 27001 Certification
Post by: RealWire on August 22, 2013, 07:16:09 PM
London, UK - 22 August 2013 - Business Optix, a leading cloud based platform provider which enables users to document, share and improve business processes and methods, today announced that it has successfully attained the International Organisation for Standardisation Certification – ISO 27001, earning the prestigious accreditation after a series of independent, external assessments.

ISO 27001 is an internationally recognised standard for information security management which demands that companies adhere to control disciplines spanning numerous areas, including risk management and security as well as business continuity management and compliance, to prevent and defend against potential data system vulnerabilities.

Peter McInally, Managing Director of Business Optix commented,
“We are proud to have gained this independent, third-party verified and accredited certification, demonstrating that Business Optix has the appropriate measures in place to ensure that the standard’s stringent requirements are met.

The certification provides impartial evidence that Business Optix is following industry best practices as part of a corporate governance programme and has implemented a robust management framework regarding information security.”

The approved information security management systems apply to the provision of platform-as-a-service (PAAS) solutions, including consultancy and training services and to cloud-enabled business process and operating models.

ISO 27001 requires that management:

Systematically examine the organisation's information security risks, taking account of the threats, vulnerabilities, and impacts;

Design and implement a coherent and comprehensive suite of information security controls and/or other forms of risk treatment (such as risk avoidance or risk transfer) to address those risks that are deemed unacceptable; and

Adopt an overarching management process to ensure that the information security controls continue to meet the organisation's information security needs on an ongoing basis.