Lanaccess Achieves ISO 27001 Certification

What is ISO 27001?

ISO 27001 (also known as ISO/IEC 27001:2022) is a globally recognised standard for cybersecurity management. It defines the requirements for establishing, implementing, maintaining and continuously improving an information security management system (ISMS).

Certification ensures that companies adopting the standard are committed to following international security best practices and implementing all available measures, including:

• Operational security: managing system security during use and operation, including malware protection, backups and vulnerability management.
• Cryptography: using encryption techniques to ensure the confidentiality, integrity and authenticity of information.
• Logical access control: managing access rights and policies for systems and applications, including authentication and authorisation.
• Communication security: protecting data networks and ensuring secure information transfer.
• Human resource security: implementing controls before, during and after employment to ensure staff understand and adhere to security policies.
• Security awareness and training: providing employees with training and awareness programmes on information security.
• Personnel change management: establishing procedures to manage staff changes, ensuring access rights and privileges are updated accordingly.
• Physical and environmental security: implementing measures to protect buildings, offices and data centres against unauthorised access, damage and natural disasters.
• Physical access control: using access control systems, surveillance and other security measures to ensure only authorised personnel can enter sensitive areas.