ISO 27001 is an international management standard for information security. The standard is a management tool that helps organisations protect valuable information – including personal data – in a secure and trustworthy manner. Among other things, ISO 27001 sets out requirements for risk management, documentation of processes and the allocation of roles and responsibilities for information security.

The aim of ISO/IEC 27001 is to achieve effective information security management tailored to our organisation’s specific needs, and to ensure that this effectiveness is maintained through a process of continuous improvement. This means that our information security is constantly updated, enabling us as an organisation to meet the challenges of a constantly changing business environment.

ISO/IEC 27001 is a standard for which our company has been certified, which means that we have documentation proving that we meet the requirements of the standard.