Information security ISO/IEC 27001
Sterling recognizes the importance of managing and protecting our information assets. Not only does it matter to us, in terms of business continuity, but it also matters to our clients for whom we may store information or digital assets.
We therefore recognise the importance of developing a systematic approach that helps us to protect our information assets and give confidence to our clients. The standard adopts a process approach for establishing, implementing, operating, monitoring, reviewing, maintaining, and improving our Information Security Management System (ISMS).
.
ISO/IEC 27001 defines the requirements for an ISMS. The standard is designed to ensure the selection of adequate and proportionate security controls. We will shortly be undergoing a pre-assessment day, to review how many of our existing systems already conform to the standard, with a view to achieving full accreditation within the next 12 months.