We are absolutely delighted to share that Enclude has achieved ISO/IEC 27001:2022 Certification!
What is ISO/IEC 27001:2022 Certification?
ISO/IEC 27001 is the world’s best-known standard for information security management systems (ISMS).
Receiving ISO/IEC 27001 Certification means that an organisation has put in place a system to manage risks related to the security of information owned or handled by the company, and that this system respects all the best practices and principles enshrined in this International Standard.
What did you have to do to get it?
A lot! It’s been a lengthy process which has involved reviewing and strengthening our existing processes to ensure full compliance with the requirements an ISO 27001 Information Security Management System is expected to comply with. This has been an organisation wide effort including staff upskilling and awareness as well as technology upgrades.
Additionally, to achieve certification the organisation must undergo two lengthy external audits which audited the application of the ISMS as well as ongoing surveillance audits to ensure standards are maintained.
Why did we do this?
There are a couple of reasons we decided to work towards this Certification –
Cybercrime is on the rise and charities are not exempt from this. Whilst it can be hard to keep on top of new risks, we wanted to be confident that we were doing everything we could to mitigate against them.
By aligning with a proven best practice framework such as ISE/IEC 27001, we can confidently demonstrate that we adopt a comprehensive approach to the security of information that is accessed, handled and stored by Enclude, and that it is disposed of in line with best practices.
We also wanted to prove that just because we’re a charity, doesn’t mean that we’re not delivering to the absolute highest standards of internationally recognised best practice – we’re sure this is something many of our clients can identify with.
What does this mean for Enclude clients?
It means that you can rest assured we have the absolute best practices and processes in place to protect not only our own systems and data, but also any client systems and data that we interact with.
It means that as we work with you to develop, implement, manage and optimise your CRM, you can be confident your information and data is safe, and that we’re doing our bit to help you stay compliant with your own obligations.
Where can I find out more about ISO 27001:2022 Certification?
You can find out more about this certification specifically on the ISO website here and more general information about ISO, the International Organisation for Standardisation here.
As always, feel free to get in touch with us directly with any comments or queries: info@enclude.ie
