t r m o o H Is The Sensitive Information Of Your Company Completely Secure?

Transcription

1 : n t a c f t r e C l 2 l O W S I y n a p m C r u Y w H t f e n e B Cyber crmnals are fndng ncreasngly clever ways every day t be able t peek ver yur shulder, and wth ths llegal ndustry beng an extremely lucratve ne, we can be sure that cyber threats wll nly ncrease as tme ges by. Take, fr example, the WannaCry ransmware that nfected mre than cmputers wrldwde durng May, Fles were encrypted and the passwrd wuld nly be made avalable f payment was made. The cmpanes and rgansatns affected by ths malware were crppled untl a patch was released several days later. Is The Senstve Infrmatn Of Yur Cmpany Cmpletely Secure?

2 The call t defend yur cmpany s senstve nfrmatn s strng and we are nt nly talkng abut updatng yur antvrus sftware and havng a frewall n place. There are regulatns n place fr yur cmpany s prtectn. Suth Afrca s very wn POPI Act s n lne wth nternatnal standards and POPI nw has a regulatr wh wll enfrce the law and see t t that cmpanes are serus abut cmplyng wth legslatn and keepng the prvate nfrmatn entrusted t them exactly as such prvate. What Is ISO 27001? One such nternatnal standard that a cmpany can be certfed wth s the ISO ISO s part f the ISO famly. The ISO famly s desgned t help rgansatns keep nfrmatn safe by managng the securty f the cmpany s assets, whch ncludes persnal and fnancal nfrmatn entrusted t yur busness by clents, emplyees and any ther thrd party entty. ISO specfcally prvdes requrements fr an Infrmatn Securty Management System

3 Recently, Mnt Management Technlges made the news by beng the frst Suth Afrcan cmpany t be certfed ISO n hme grund. Case Study Mnt Management Technlges A few years ag, the CEO f Mnt Technlges was asked abut the measures they had n place and he and Lauren Clark had a lng cnversatn abut nfrmatn securty. Back then, certfcatn seemed lke t was wthn reach but as they sn fund, cmplyng wth the standard requred a massve system that needed cntnual mantenance. Lauren dwnladed the ISO standard and she and the IT Manager at the tme drafted all the necessary plces.

4 When they felt t was gd and ready and certfcatn was a mere frmalty and handshake away, they asked a cmpany n Inda t send an audtr t take a lk. R later, an audtr was standng n ther ffces and lkng at ther Excel spreadsheets. He sad that t was nt an audt anymre and that he wuld rather act as ther cnsultant. He als sad that they had merely scratched the surface f the tp f the ceberg and that the rest f the ceberg was stll undscvered fr them. Sx mnths f ntensve wrk later, they fnally had a wrkng system. But snce ther system was cntaned n Excel spreadsheets, cmplete ntegratn wth the everyday wrk lfe f ther emplyees was nt a pssblty. Lauren dscvered RUBQ s sftware and servces, nstantly recgnsng that t was exactly what ther system needed. The RUBQ tl tk ver the dstrbutn f cmmuncatn f the plces and prcedures, remnded them f when the plces and prcedures needed renewal r needed t be revewed, and t gave them the ablty t cnduct ther nternal prcedures n a mre effectve way. RUBQ Arrved On The Scene

5 It was als thrugh RUBQ that Lauren heard f a Suth Afrcan based cmpany that culd carry ut the audt fr them - Cardn, a PECB partner. The bggest drawcard f Cardn was ther cntextual understandng f Suth Afrcan cmpanes as well as ther accessblty. They als prvded Mnt wth a cst reductn f mre than 50%. Cardn Offered Cntextual Understandng and a Cst Reductn Wth the RUBQ sftware, Cardn s grup f prfessnals was able t autmate the prcesses that they wuld therwse have had t d manually. I have never seen anythng that des qute what RUBQ des r can d as a framewrk, Bran Henry frm Cardn sad n an ntervew.

6 Bran gave us the fllwng advce abut ISO certfcatn: St dwn wth the experts, the nes wh understand the certfcatn standard, t mplement the management system. There s a rte f passage here as well because yu cannt be certfed untl yu have carred ut at least ne nternal audt, a management revew f the management system aganst the standard, and then mplemented a cntnuus mprvement prgram t ensure that t wll mprve ver tme. Untl yu have dne all f ths, there s n pnt n callng an audtr. When asked abut the future, Lauren sad that Mnt Management Technlges wuld cntnue t wrk wth Cardn and RUBQ n rder t reman an ISO certfed cmpany because f the trust ths brngs t the relatnshp they have wth ther clents. They als knw that ths gves them an edge ver the cmpettn because ther system s securty s valdated. "There Is A Rte Of Passage..."

7 If yu als want t shw hw serus yu are abut nfrmatn securty by havng yur wn cmpany certfed ISO 27001, then get n tuch wth RUBQ by emalng us at nf@rubqbz.cm r phnng us at and we can advse and assst yu every step f the way.