Skip to content

Uncategorized

Which areas were audited for the ISO 27001 certification?

As part of our ISO 27001 certification, a comprehensive audit was carried out to make sure that we meet the highest standards of information security management. The audit covered various areas of our company:

  • Information security policies: the documentation of our security policies, procedures and practices was examined in detail.
  • Risk management: our processes for identifying, assessing and dealing with information security risks were audited to make sure we can detect and handle threats proactively.
  • IT infrastructure and systems: our hardware, software and networks were checked for vulnerabilities and for the effectiveness of our protective measures.
  • Staff training and awareness: our training programmes and initiatives to raise staff awareness of information security were scrutinised.
  • Access control: the measures we have implemented to control access to sensitive information were evaluated.
  • Incident management: our protocols and measures for handling security incidents were assessed.
  • Data backup and recovery: our strategies for backing up and restoring data in the event of an incident were reviewed.
  • Supplier management: our relationships with suppliers were analysed to make sure they also meet our high security requirements.
  • Physical security: our physical infrastructure, including offices and server rooms, was checked for security measures.
  • Compliance with legal and regulatory requirements: we were checked for compliance with all relevant laws and regulations on data protection and information security.

We will be happy to provide further information.

Looking for new customers abroad?

Tell us briefly what it’s about. We will get back to you personally.

Book an initial call
Book an initial call