Category: Cyber Security

Home / Cyber Security
Jun142016

5 benefits of ISO 27001

5 benefits of ISO 27001

ISO 27001 is the standard for information security management systems. It is the only auditable international standard for this. ISO 27001 includes policies, practices, developments, and systems that manage information risks, such as cyberattacks, data breaches, theft, or data hacks. But what are the benefits for your organisation?

1. Lower risk of fines

The global benchmark has accepted the ISO 27001 standard for effective management of information assets. By adhering to data protection requirements, the organisation reduces the risk of fines. Consequently, potential financial losses due to data breaches are also mitigated.

2. Protection of reputation

There is a global increase in cyberattacks. These attacks can have a significant impact on an organisation and its reputation. As ISO 27001 protects the organisation against these cyberattacks, it also indirectly safeguards the organisation’s reputation.

3. Compliance with various regulatory requirements

ISO 27001 certification complies with stringent legal requirements such as the GDPR (General Data Protection Regulation), the NIS Directive (Directive on Security of Network and Information Systems), and other cybersecurity laws.

4. Structure and focus

Rapid growth within an organisation can quickly lead to confusion over responsibility for information assets. ISO 27001 can establish clear responsibilities for information risks.

5. The necessity for frequent audits is reduced.

ISO 27001 certification is globally accepted and demonstrates effective security, reducing the need for repeated client audits.

Jun92016

How can a SOC audit increase profits?

How can a SOC audit increase profits?


Many organisations focus primarily on their core competencies and outsource the rest. Common examples include payroll administration and technological infrastructure. Dependence on these services is increasing as many industries and businesses become interconnected.

Several stakeholders examine SOC reports. When a SOC audit report appears ‘correct,’ it distinguishes an organisation from its competitors and can provide operational credibility. Stakeholders mainly look at the following variables:

  • Assurance over security activities
  • Availability
  • Processing integrity
  • Confidentiality
  • Privacy

Investing in a SOC audit offers advantages. Organisations not only retain more customers but can also attract new ones. Consequently, this can lead to maintaining or even increasing profits.

To achieve a successful SOC audit, an organisation must have an efficient operational environment. This allows the organisation to perform effective controls. Some organisations may need to do a lot of work to achieve a successful SOC audit. This is often because not only a small part of the environments needs to be adjusted, but entire environments may need to be redesigned. This is often the turning point where many organisations lose focus. They forget the value a SOC audit can bring, which is why it is important for organisations to maintain an investment focus.

Securance can assist with this. Risklane offers services in governance, risk, and compliance. Since 2014, Securance has been the market leader and most innovative organisation regarding ISAE 3402 implementation and certification. In addition to ISAE 3402, we offer services for ISAE 3000, GDPR/AVG, ISO 27001, ISO 9001, and COSO ERM

Nov252015

Outsourcing trends

Outsourcing trends


Organisations are continually seeking ways to leverage competitive advantage to expand markets and increase profits. Increasingly, they are outsourcing non-core activities. Nevertheless, management remains ultimately responsible for risk management and implementing an effective control framework. This has led to a greater demand for assurance standards such as ISAE 3402 or ISAE 3000 for activities performed by third parties.

History

For much of the 20th century, the most popular business model was the large integrated company that managed and controlled its assets directly, focusing on diversification to broaden its business base and benefit from economies of scale. Many large companies developed a new strategy to concentrate on their core activities, enhancing flexibility and creativity. This required identifying critical processes and deciding which processes could be outsourced.

Outsourcing

Due to globalisation, increased competition, and cost pressures, organisations are outsourcing more essential business functions to service providers. Outsourcing core processes has a direct impact on a company’s financial statements and key business processes. It is no longer limited to routine back-office tasks. How can organisations gain confidence in outsourced business processes? How can they ensure control and assurance over these outsourced processes?

The increase in outsourcing, especially of crucial business information, also brings heightened risks and security concerns. Organisations may face operational, financial, or even reputational damage due to security shortcomings of external service providers. An independent review of critical outsourced business processes or IT systems helps organisations identify and manage these risks and regain assurance over outsourced processes.

The most common reasons for outsourcing are:

  • Control and reduce operating costs
  • Improve focus on core business processes
  • Access world-class capabilities
  • Free up internal resources for other purposes
  • Increase efficiency in specific functions
  • Insufficient internal resources
  • Share risk with other organisations

The current phase in the evolution of outsourcing involves strategic partnerships. Until recently, it was taken for granted that organisations could not outsource core competencies. This has changed, and ISAE 3402/SOC1 or ISAE 3000/SOC2 has become commonplace.

 

May192015

TelecityGroup Nederland realiseert ISAE 3402 certificering

TelecityGroup Netherlands

realises ISAE 3402 certification


Amsterdam, 19 May 2015 – All TelecityGroup locations in Amsterdam have been certified according to the international outsourcing standard ISAE 3402. With this certification, TelecityGroup Netherlands demonstrates that its data centres meet internationally accepted quality and security standards. For customers, this certification provides proof that their outsourced processes are effectively controlled within the data centre.

Secure Data Centres

The certification indicates that the processes in TelecityGroup’s data centres comply with the security requirements of the internationally recognised ISAE 3402 (International Standard for Assurance Engagements). TelecityGroup customers who have placed their IT equipment in one or more data centres in Amsterdam can use the ISAE 3402 report to demonstrate that security processes within the data centre are in order. “Many companies using our data centre services want transparency on how we, as a service organisation, ensure the quality and security of our data centres,” says Alexandra Schless, Vice President Western Europe & Managing Director at TelecityGroup Netherlands.

Different Types

Securance has implemented ISAE at TelecityGroup. In the certification process, the auditors distinguish between Type I and Type II. In a Type I ISAE 3402 report, they assess the control organisation at a specific point in time. During the audit, Securance evaluates the design and existence of control measures. In a Type II audit, they also assess the operating effectiveness of these measures. Schless: “We are working to ensure that our control organisation also operates according to the ISAE 3402 standard and expect to have the Type II report completed later this year. This will provide our customers worldwide with a clear and definitive guarantee.”

Telecity is pleased with this certification: it shows both Dutch and international organisations that we have correctly set up all processes regarding security.

  • Alexandra Schless | Vice President Western Europe –

About Telecity Group

TelecityGroup is a leading provider of premium carrier-neutral data centres with locations across Europe. TelecityGroup’s data centres offer high connectivity and secure environments for IT and telecom equipment, which are the driving force behind the digital economy. In these data centres, the networks that make up the internet converge, and data-intensive online applications, content, and information are securely hosted. TelecityGroup is listed on the London Stock Exchange (LSE: TSY).