Here at CWSI we take our information security and that of our clients seriously. That’s why we are constantly investing in our security practices and credentials and why we’re delighted to announce that we have now achieved the ISO 27001:2013 certification – the international standard for best practices in Information Security Management Systems. After independent verification and audit by the British Standards Institute (BSI) during Q1 of this year, we were awarded one of the most widely recognised and internationally accepted information security standards across our entire business practice.
Philip Harrison, CWSI’s Chief Technical Officer, explains “This latest certification, alongside our Cyber Essentials Plus certification makes us Europe’s first supplier of enterprise mobility solutions to hold both certificates across the entire business.”
Why is this important?
The introduction, in 2018, of the EU General Data Protection Regulation (GDPR) has significantly upped the focus of organisations when it comes to protecting their customer data. However, any security system is only as good as its weakest link, including the security of third-party providers. With the achievement of our ISO certification, CWSI’s customers can be confident that our Information Security Management Systems have been assessed against the most rigorous of global standards and are regularly audited by an external body. See our Trust Centre for more information on how CWSI manages the security of our customers’ data.
Certification & Audit
The award of our ISO 27001 certification was assessed by a United Kingdom Accreditation Service (UKAS) approved independent audit, during which CWSI was required to demonstrate an ongoing and systematic approach to managing and protecting company and customer data. A copy of our certificate is available here.
What is ISO 27001?
The ISO 27001 standard ensures that organizations have established methodologies and a framework to business and IT processes to help identify, manage and reduce risks to the security of information.
One of the few standards that uses a top-down, risk-based approach to evaluation, ISO 27001 identifies requirements and specifications for a comprehensive Information Security Management System (ISMS), defining how an organisation should manage and treat information more securely, including applicable security controls.
CWSI has been certified by BSI to ISO 270001:2013 under certificate number IS 701688
