Ensuring a high level of security is not merely a question of installing the latest software updates and an antivirus program. We need to incorporate security into everything we do as a company – from installing a new web server to handling customer service.
And the ISO 27001 standard requires the involvement of everyone, board member and ordinary employee alike.
ISO 27001 is an international standard defined by the International Organization for Standardization (ISO), specifying a framework for information security management to ensure confidentiality, integrity and availability of a company’s information.
Regular risk assessments are an important tool for achieving the desired security level. This standard advocates that companies continually improve their information security by performing risk assessments, monitoring and reporting.
To obtain ISO 27001 certification, a company’s management system must be reviewed annually by an external auditor. Punktum dk has been ISO 27001 certified since 2013. Click here to see our latest ISO 27001:2013 certificate.