Aligning to ISO 27001 standards

November 11, 2019

Information and data have become the most valuable, yet vulnerable, asset for most organisations as they provide intelligence and affect commercial advantage. The general public and organisations alike are increasingly aware that protecting these assets from compromise or loss must be of the highest priority. At finao, we are fully committed to protecting the security of your data, as well as ours, and we do so by aligning ourselves to the highest globally recognised standard: ISO 27001.

ISO 27001 is a risk-based compliance framework designed to help organisations manage and improve information security and data protection processes. This global standard independently guarantees that security issues are effectively identified and addressed and that security processes and documentation are formalised. finao currently aligns to all applicable ISO 27001 requirements and ISO 27002 controls. However, our commitment to this endeavour does not end here: Our goal at finao is to become ISO 27001 certified.

As part of our journey towards this goal, we could not be more proud to announce that our business Director Terry Down has now successfully completed training and become an ISO 270001 certified auditor! This certification outlines the key processes to effectively manage information security risk in order to protect information assets, such as client and user details, sensitive organisational information and financial data.

This first step in our path towards becoming ISO 27001 certified reassures you that at finao we understand security and take security seriously, which will lead your organisation, as well as ours, to a stronger business model and an information security management system that complies with the highest standards.

Related posts

Maintaining Form History

At finao we understand the importance of maintaining system form history. With the growing emphasis on compliance and data protection, maintaining online form history has emerged as a crucial aspect for organisations.

Safeguarding Data and Fortifying Digital Systems with MFA

In an increasingly interconnected world, where digital threats loom large, the significance of robust security measures cannot be overstated.

Compliance requirements (ie. HVNL or WHS)

finao enables organisations to digitise even their most complex requirements. Our skills were recently tested when a client briefed us on their Worker Fatigue Management requirements and specifically the need to be compliant with the Heavy Vehicle National Law (HVNL) and Regulations.