FMIS certified for ISO 27001

FMIS Achieves leading international infosec standard

FMIS has been accredited with the internationally recognised ISO 27001 information Security standard. Certification for the internationally recognised standard confirms FMIS commitment to information security at a time when data protection is increasingly important for software vendors and users.

FMIS is presented with its ISO 27001 certificate.

What is ISO 27001?

ISO/IEC 27001 is the best known in the ISO 27000 family of information security standards. The standard provides an audited verification of company data security measures and requires:

• FMIS to systematically examine all potential information security threats, and vulnerabilities as well their potential impact.
• Put in place a full range of information security controls as part of their Information Security Management System (ISMS) to counter threats identified.
• Develop and implement management processes to ensure ongoing awareness and protection against information security risks.

Why it matters

Information security has become increasingly important for all organisations with the rise of the information economy and the processing of that information either in the cloud or via networked systems.

Responsibility for ensuring that data is stored and processed securely often falls to purchasing or IT departments. Standards like ISO 27001 provide the assurance that suppliers are able to protect sensitive or personal data effectively.

Building a security first culture

ISO 27001 covers much more than simply IT systems. Although ensuring sufficient technical processes, skills and checks are in place, the standard ensures an organisation-wide approach to data security.

Compliance with ISO 27001 starts with senior management and cascades to every level of the company ensuring that all staff and contractors are fully aware of their responsibilities and have the skills needed to fulfil these.

Ongoing security

Another feature of the standard is that it requires ongoing compliance. Information Security is a rapidly changing field and companies need to constantly review the security measures and processes they have in place.

ISO 27001 achieves this through a combination of internal reviews and checks as well as annual external audits of the company.

A culture of excellence

Achieving ISO 27001 accreditation follows FMIS recent attainment of the ISO 9001 Quality Management Systems standard and reflects a conscious decision by the company to formalise a culture that has always existed within the business.

FMIS Data Protection Lead, John de Robeck, explains it this way “FMIS has never had a security breach in over 30 years, so the decision to pursue ISO 27001 was not because we felt there was a problem. What we did realise was that organisations increasingly need the assurance that comes with formal standards. For us, the process has been a great opportunity to crystalise a way of working that has always existed within FMIS and turn it into something that our clients can instantly recognise.”